Shane Stimac
Security Engineer at Acuity Insurance- Claim this Profile
Click to upgrade to our gold package
for the full feature experience.
Topline Score
Bio
Experience
-
Acuity Insurance
-
United States
-
Insurance
-
700 & Above Employee
-
Security Engineer
-
Mar 2017 - Present
Sheboygan, Wisconsin Area - Conduct risk assessments on OS and installed Applications - Consults on projects - Build Secure OS images - Manage OS integrity checkers - Manage vulnerability scanners
-
-
-
University of Wisconsin-Milwaukee
-
United States
-
Higher Education
-
700 & Above Employee
-
Information Security Analyst
-
Jun 2011 - Mar 2017
● Developed risk assessment process based on National Institute of Standards and Technology (NIST) SP 800-30 creating a repeatable process that identifies risks and offers recommendations to reduce the risk ● Conducted risk assessments on critical IT systems and infrastructure, identifying vulnerabilities, risks, and offering recommendations, which helped spawn projects to enhance security ● Instrumental in helping the organization becoming PCI Version 2.0 compliant by… Show more ● Developed risk assessment process based on National Institute of Standards and Technology (NIST) SP 800-30 creating a repeatable process that identifies risks and offers recommendations to reduce the risk ● Conducted risk assessments on critical IT systems and infrastructure, identifying vulnerabilities, risks, and offering recommendations, which helped spawn projects to enhance security ● Instrumental in helping the organization becoming PCI Version 2.0 compliant by conducting risk assessments and identifying vulnerabilities and risks. ● Helped the organization protect HIPAA covered areas by making sure they are compliant and reducing any risk found. ● Ensured security was an essential part of any new project the organization was conducting by offering security consulting services. ● Integrated SANS Top 20 Security controls into the organization's overall security plan and conducted yearly gap analysis. Show less
-
-
-
-
Web Developer
-
Oct 2008 - Jun 2011
● Worked with clients to define requirements, design, develop, and deploy web applications that include rich integration with backend databases and cloud resources. ● Built integrated application making it easy to upload newly created videos to youtube.com for students, staff, and faculty. ● Built highly graphical javascript/ajax web application that enabled staff to be easily assigned to deaf/hard-of-hearing student’s classes. ● Built local authentication models that securely… Show more ● Worked with clients to define requirements, design, develop, and deploy web applications that include rich integration with backend databases and cloud resources. ● Built integrated application making it easy to upload newly created videos to youtube.com for students, staff, and faculty. ● Built highly graphical javascript/ajax web application that enabled staff to be easily assigned to deaf/hard-of-hearing student’s classes. ● Built local authentication models that securely integrated with hosted vendors. ● Deploying Federated Identity and Single-Signon to local and remote web applications. ● Evaluated and tested Coldfusion development frameworks. ● Worked with faculty to design and develop web application integral to grant proposal. ● Built custom modules used in Web Content Management System. Show less
-
-
-
-
Coordinator - Data Strategy & Technology
-
Oct 2007 - Oct 2008
● Automated a highly manual mailing process, which saved time and reduced user input error. ● Created easy to use Recruiter web applications for locating potential recruits and gathering prospect event statistics. ● Created student prospect web applications, that allowed prospects to request information and sign up for up coming recruitment events. ● Analyzed current business processes and system functionality so as to recommend changes to both the system and business process… Show more ● Automated a highly manual mailing process, which saved time and reduced user input error. ● Created easy to use Recruiter web applications for locating potential recruits and gathering prospect event statistics. ● Created student prospect web applications, that allowed prospects to request information and sign up for up coming recruitment events. ● Analyzed current business processes and system functionality so as to recommend changes to both the system and business process allowing automation and streamlined communications with student recruits resulting in higher student enrollment. ● Supervise and lead IT student employees in completing IT projects and day-to-day operations. Show less
-
-
-
Northwestern Mutual
-
United States
-
Financial Services
-
700 & Above Employee
-
IT Security
-
Jul 2005 - Oct 2007
● Provide IT security consultation and risk assessment for large corporate projects and critical systems. ● Monitor compliance with and enforce the security policies adopted by the enterprise. ● Respond to incidents related to the use and abuse of IT assets including investigations.
-
-
IT Auditor
-
Jun 2004 - Jul 2005
● Conduct audits on critical corporate Information Systems infrastructure, such as UNIX, Windows, and databases. ● Perform Information Systems audits including setting audit scope, testing objectives and report findings. ● Track, manage and close open audit issues.
-
-
Systems Specialist
-
Oct 1999 - Jun 2004
● Managed large corporate projects on time and within budget. ● Successfully led an identity Management team in completing assigned projects and keeping the identity infrastructure up and running. ● Setup Identity Management systems. ● Supported and maintained LDAP Directory Services running on 30 Sun Solaris Servers, which was used by over a million customers. ● Supported and maintained LDAP Directory Services running on Microsoft Windows Server 2003. ● Supported and maintained… Show more ● Managed large corporate projects on time and within budget. ● Successfully led an identity Management team in completing assigned projects and keeping the identity infrastructure up and running. ● Setup Identity Management systems. ● Supported and maintained LDAP Directory Services running on 30 Sun Solaris Servers, which was used by over a million customers. ● Supported and maintained LDAP Directory Services running on Microsoft Windows Server 2003. ● Supported and maintained a Visual Basic security application, which is used by 20,000 individuals. ● Developed application in C running on Sun Solaris that saved company $250,000. ● Built and maintained developer Application Programming Interface (API), written in Java, which is used by over 300 applications. ● Reduced technical support costs by creating Java Servlets that provide easy access to application data and real time monitoring of critical systems. ● Developed applications in Java to maintain application security data. ● Provided technical support to over 500 developers. ● Engineered and supported application security infrastructure that is used by 1.5 million users and kept availability to 99.999%. ● Evaluated, designed and built Web Single Sign-on environment.
-
-
Education
-
University of Wisconsin-Milwaukee
Bachelor of Business Administration (BBA), Management Information Systems, General -
University of Minnesota-Twin Cities
-
University of Wisconsin-Madison