Senior Consultant

• Aug 2023 - Present

Assistant Director

• Sep 2021 - Aug 2023

Information Security Consulting: SMBs, Nonprofits, MSPs, etc.• Designed surveys and interviewed critical personnel (C-suite, IT directors, analysts, etc.) to identify critical security needs and relevant compliance frameworks based on risk profile and strategy (including but not limited to: NIST 800-53, ISO 27001, PCI-DSS, FedRAMP) to develop relevant information security and technology policies and standards aligned with best practice• Developed information security roadmaps, including system security plans, vulnerability management plans, incident response plans, as well as security awareness and training programs• Presented key decision-makers with accurate, unbiased evaluation (capabilities, costs, risks) of information security solutions and authored contracts outlining product delivery process and project closureProject Management: Small Team w/Functional Matrix Structure• Provided end-to-end project management on multiple projects for the analyst, marketing, research, and administrative team projects, including scope definition, analysis, design, planning, execution, and closing simultaneously• Introduced and trained the Agile Scrum project management and software (Asana) to the company, facilitating and improving planning, organization, and tracking of project activities across all company departments and client projects• Designed, implemented, and led the planning, sprints, retrospectives, and other meetings across teams until they could be led by team leads – providing access to relevant information and advocacy-based representation by team leads for all members, improving office dynamics and company culture by regularly applying group experience gained from lessons learned to develop future processesIntern Training Program:• Managed and automated daily training, supervising a 16-member team of interns responsible for company revenue, driving sales, and securing several co-branded marketing opportunities for the company at no additional cost Show less

Conference Organizer

• Sep 2021 - Aug 2023

Established in 2022, the Anderson University Center for Security Studies and Cyber Defense is a 501(c)(3) nonprofit organization dedicated to training the next generation of cybersecurity and national security professionals while providing below-market information security program support services through consulting, compliance, curated threat intelligence, and more. We started CONspiracy in 2022 (a reference to the raven in our logo and University mascot named after the friendlier term for a “gathering of ravens”) to bring together professionals, educators, and students to Madison County, Indiana, and the United States.• Created, organized, managed, and promoted the conference with over 200 attendees in its inaugural year, managing a team of over 16 volunteers and 15 guest speakers.• Served as a primary point of contact for partners and conference participants, resolving inquiries• Was responsible for event logistics and provided beneficial advice and support to the team responsible for event logistics - developing the registration process, advertising campaign, promotional copy, and more. Show less

Resident Director

• Aug 2021 - Jun 2022

I had originally moved back to Anderson to work with the cybersecurity program, applying for the RD role as an on-ramp. It was an absolute blast and an extremely informative crash course in management an servant leadership. As the Resident Director of the Smith Hall men's dormitory, my passion for fostering community and connecting with students was always at the forefront of my mind. I worked tirelessly, sometimes overnight, working to create a welcoming and inclusive environment where everyone felt valued and heard. One of my biggest challenges was building trust with the students as the new hire after a particularly tough year with the challenges that came from COVID regulations. However, with time, effort, and a lot of listening and care, I was able to establish strong relationships and encourage everyone to lead together. My experience serving these young men was incredibly rewarding, and I am grateful for the opportunity to have made a positive impact on so many lives. • Crisis Management: Served on-call rotation responding to mental and physical emergencies of 1,113 residents. • Budget Management: Managed Smith Hall budget and reviewed timesheets for resident assistants • Hiring & Management: Recruited, selected, trained, supervised, and evaluated eight resident assistants • Community Programming: Implemented wellness program models and developed community life • Professional Mentorship: Counseled students on academic performance, career goals, and adult life • Conflict Mediation: Mediated conflict within the dorms and handled conduct issues and referrals Show less

Library Assistant

• Feb 2019 - Aug 2021

During my time as a librarian at the Institute of World Politics, I found immense joy in connecting with people and helping them further their learning. I was passionate about providing resources and guidance to students, faculty, and staff. Whenever their was downtime I was looking for new ways to improve our processes, make it a more welcoming and productive space for everyone, or learn something new. It was fulfilling to witness the growth and success of those I assisted, and cherish the relationships I've built with those I was able to serve. • Security Advising: Improved organizational security by introducing new controls and educating staff and students. • System Administration: Repaired, improved, and secured campus workstations saving time, money, and data. • Analyzed patron requests to determine research needs and further support project development • Assisted in managing and updating a database of several thousand books and users • Performed clerical activities such as answering phones, sorting mail, filing, typing, word processing, photocopying, and mailing out materials. Show less

Information Security Analyst

• Nov 2018 - Jan 2020

During my time as an Information Security Analyst with TRAPWIRE, I gained invaluable skills in managing and monitoring various security systems independently. My role involved analyzing and interpreting data, responding to potential security threats, and assisting intelligence analysts whenever requested. I was also responsible for managing the SIEM and vulnerability scanning tools, which required a high level of focus, attention to detail, and speed. Additionally, I managed the preparation of the System Security Plan for a successful FedRAMP audit under the direction and guidance of my manager. Overall, my time there honed my experience in threat detection and response, filtering signal from noise, and familiarizing me with the day-to-day challenges of SOC and GRC analysts in small teams - making me a valuable asset to any team dedicated to ensuring the safety and security of their data and systems. • Incident Response: Led initial investigation and triage, configured and monitored SIEM rules and alarms. • Vulnerability Management: Conducted internal vulnerability scanning and assisted code review. • Compliance: Collected and documented evidence of critical system configurations and changes for FedRAMP. • Threat Intelligence: Collected OSINT and produced reports for senior analysts regarding physical security as related to event, region, client, and actor when tasked. Show less

Information Security and Compliance Intern

• May 2018 - Oct 2018

Originally applied for a software development internship with Ontario Systems, as there were no information security roles. According to my interviewers and a security analyst at the company - my passion for evangelizing security, my multidisciplinary background, people skills - led to the director of corporate security creating an information security internship, and later to a job offer with the company. I loved working with the team, and had the privilege of a highly independent cross-functional role conducting code reviews, researching and updating documentation of security artifacts, conducting vulnerability assessments, and creating and presenting security awareness trainings to peers and full-time employees. When there wasn't work immediately assigned, I would interview staff to identify key concerns and draft ideas for process improvement and practical risk assessments threat intelligence reports. Unfortunately, the position was withdrawn as there were last-minute budget changes - but I would work with any of the professionals there again in a heartbeat. • Risk Assessment: Briefed department heads on risks identified through code reviews and external research. • Vulnerability Scanning: Assisted senior analysts with web app vulnerability scanning and preliminary testing. • Security Education: Developed lessons for staff training on security awareness and secure coding practices. Show less