Company Owner

• Aug 2021 - Present

Senior Security Analyst

• Mar 2015 - Jul 2021

Interacting with clients to conduct a variety of types of security assessments, architecture reviews, expert analysis, and research and development. Provide both lead and support roles as necessary for projects, occasionally acting as project manager. Keep the client current on status, adjusting both oral and written communications as necessary to ensure that everyone understands, no matter their IT knowledge level. Interacting with clients to conduct a variety of types of security assessments, architecture reviews, expert analysis, and research and development. Provide both lead and support roles as necessary for projects, occasionally acting as project manager. Keep the client current on status, adjusting both oral and written communications as necessary to ensure that everyone understands, no matter their IT knowledge level.

Penetration Tester

• Nov 2012 - Feb 2015

Working on-site or remotely, implement all aspects of the attack cycle (reconnaissance, scanning, exploiting, maintaining access, and covering tracks) using appropriate standard or custom methods within the defined project scope. Utilizing existing access and discovered weaknesses, attempt to gain additional access to demonstrate how weaknesses can provide leverage to compromise an entire network. Document all activity and findings in a follow-up report with usable recommendations taking into consideration business and regulatory requirements. Rewrote the team's pen test methodology using PTES (Penetration Testing Execution Standard) as a framework. Wrote accompanying documentation explaining the methodology to the client and created new report templates that better manage the flow and provide clear information for both technical and non-technical readers. Show less

Information Management Senior Specialist

• Jan 2004 - Nov 2012

Support 28 county agencies with more than 18,000 users over ten Active Directory forests, serving over 3 million constituents. Provide primary incident handling, vulnerability assessments, and auxiliary support to multiple county departments. Manage interagency network traffic to ensure compliance with legal mandates. - Managed level 3 response using network forensics and (IDS) to discover the source of security intrusions or other problem incidents, and gain full understanding of the scope of the attack. - Drove network improvements to maintain a secure and reliable communications structure. Simplified complex routing architecture and high-maintenance environment by reducing firewalls by 60%, and migrating to firewall clusters to improve information availability. - Took the lead in developing new documentation for use by team and improving communication procedures for the entire project, internally and externally. Documentation became recognized as the "gold standard" of work for the County to follow. - Established security policies that enabled separate agencies to manage their own communications standards. - Tailored documentation to target audience, providing both business and technical explanations. Constructed documentation with ISO standards in mind, detailing purpose, scope, definitions, diagrams, external references, actual procedures, review standards, and approvals. - Created training material and led training sessions for up to 30 people. - Worked closely with vendors to ensure high service levels; connected with support staff, engineering liaisons, developers, product line directors, sales reps, and installation engineers. Show less

Mentor

• Nov 2008 - Jan 2009

Mentored students in course SEC504: Hacker Techniques, Exploits, and Incident Handling. Maintained high level of student satisfaction scores to retain mentor status. Completed extensive course preparation to ensure learning needs and students’ expectations for high quality were met. Students went on to pass GCIH exam. Mentored students in course SEC504: Hacker Techniques, Exploits, and Incident Handling. Maintained high level of student satisfaction scores to retain mentor status. Completed extensive course preparation to ensure learning needs and students’ expectations for high quality were met. Students went on to pass GCIH exam.

NOC Technician

• Feb 2002 - Jun 2003

Worked 12-hour shifts as part of a 24/7 shop monitoring the operations of a data center, including maintaining the SLAs of numerous customers. One customer was a multinational, and required coordinating troubleshooting and maintenance with staff in the US, Australia, and the United Kingdom. Worked 12-hour shifts as part of a 24/7 shop monitoring the operations of a data center, including maintaining the SLAs of numerous customers. One customer was a multinational, and required coordinating troubleshooting and maintenance with staff in the US, Australia, and the United Kingdom.

Systems Analyst

• Oct 1999 - Feb 2002

Deployed and maintained end-user equipment such as desktops and printers. Assisted senior group on server and network troubleshooting. Deployed and maintained end-user equipment such as desktops and printers. Assisted senior group on server and network troubleshooting.

Desktop Support

• 1994 - 1998

Assisted in rollouts and provided ongoing technical support to both office and remote staff Assisted in rollouts and provided ongoing technical support to both office and remote staff