PROFESSIONAL EXPERIENCE:

Confidential

PC Technician

Responsibilities:

• Disconnects and reconnects.
• Working with InnerVision and other individual contracts moving entire departments, floors, buildings, companies including user workstations, Network operation centers, Specialty equipment, etc..

Confidential

Mid - Level Penetration Tester

Responsibilities:

• Utilizing KALI Linux to attempt to simulate a real-world OP along the cyber kill chain.

Confidential

Security Consultant

Responsibilities:

• As a member of the Confidential department, I worked with some of Confidential largest clients, such as: Moneris, LifeLabs, The Royal Canadian Mint on performing gap assessments of their Information Security Policies and Procedures and subsequent development of those policies and procedures to ensure compliance with: PCI DSS, HIPAA, GDPR, ITAR, etc…
• Conducted and participated in presales meetings with clients and potential clients.
• Working with the Sales team to create SOWs. Leading security teams along with internal and client side Project Managers to achieve Statement of Work objectives.
• I wrote and published a White Paper on 23 NYCRR 500 which was featured on the THG website.
• Supervised, mentored and supported other consultants with the firm and did the same as a liaison with various departments of client companies.

Confidential

Information Security / Compliance consultant

Responsibilities:

• Developed the company’s Information Security Policy with special emphasis on PCI DSS 3.1, HIPAA, and consideration for International Laws and Regulations. This effort was done in conjunction with Compliance Point.
• Development of a Security Awareness Program - Utilizing Hoopla Slides, Incentives, Games, Google Forms, Signage, Banners
• Created and delivered Security Awareness presentations and Security Awareness Training Sessions for On-boarding and On- going training for departments.
• Working with external security assessment company - Black Hills for ongoing assessments and mitigation plans.
• Utilized FogBugz ticketing system to submit and respond to security tickets.
• Attended all Security Team meetings, provided support as subject matter security expert and responded to Security team incident reports and emails.
• Development of user-side Acceptable Use Policy; created and developed Business Continuity Policy, Document Retention Policy, and began development of Incident Response and Disaster Recovery Plan.
• Conducted physical security audits and made recommendations for remediation of issues.

Confidential

Information Security Administrator/ Office Manager

Responsibilities:

• Acting office manager, I was also responsible for all tech support / help desk for the office including MS Office, Medical billing, Security Administration, Databases, and Website maintenance and creation for various other businesses owned by Dr. T.
• Development and Implementation of HIPAA Security Policies and Procedures. Business continuity planning.
• Administration and account maintenance of user accounts and all desktop support for Windows OS environment.
• Created Security Awareness Training program from the ground up and developed training presentations.
• Conducted risk assessments and gap analysis of the medical practice, which included identification, and quantification of risks, cost benefit analysis, ROI reports, and infrastructure design and business continuity planning assistance.

Confidential

Clinical Systems Analyst

Responsibilities:

• As the senior member of the Confidential Department, first point of contact, and main source of provider support, I was responsible for supporting, administrating, configuring and querying the Health Information Systems software which included: Allscripts Professional EHR, Allscripts PM, and the QS1 pharmacy program.
• I was being training by the Operations Manager to take over his position and was therefore given management responsibilities such as training and mentoring staff, direct reports, managing vendors and consultants and was included on the review of resumes, hiring/firing, etc.
• Direct point of contact with Healthcare clearinghouses (Navicure and Powerline) for troubleshooting medical and pharmaceutical claims processing.
• Liaison between Confidential and the IT Department for the Health Services and Mental Health departments which included placing routine help tickets to the I.T. Department using the web-based TrackIt Ticketing Software.
• All account creation and maintenance for the Allscripts EHR and Allscripts PM via Allscripts Administration Module and Allscripts Security Manager respectively as well as all account creation and maintenance in the QS1 program. I also perform troubleshooting, lab mapping, clinical customization of the Allscripts software.
• My administration duties often overlap with the I.T. Department and I assist with User account administration of Health Service and Mental Health Services Departments in Windows Active Directory.
• Created queries to extract and analyze data from Allscripts EHR and Allscripts PM for the reporting of quality measures (to the government, for grants, research studies, etc.). I mainly use MS Access and MS Excel and some MS SQL to perform these duties.

Confidential

Forensic Analyst

Responsibilities:

• Worked with one of the leading Forensics professionals in the United States - assisting with: investigations for a high profile civil case involving two Entertainment industry companies, hacking incidents, security and forensic analysis.
• Working on cases assisting one of the leading forensic experts in the country.
• Working with a variety of operating systems (Red Hat Linux, Fedora Linux, BSD Linux, Darwin Unix / MAC OS X,
• Windows XP/2000/2003, Helix, Backtrack (now known as KALI).
• Using forensic hardware and software to image systems. Mainly used FTK (Forensic Tool Kit) but became familiar with various tools such as TSK (The Sleuth Kit), occasionally with Autopsy (TSK front end), and EnCase.
• Analyzed allocated and unallocated space, memory, etc. Carving out deleted files from unallocated space, carving out files captured via sniffer program (Wireshark/Ethereal) using hex editors, creating a timeline of the incident, maintaining chain of custody, etc. and created detailed reports to be used in court proceedings.

Confidential

Information Security Manager / Project Manager

Responsibilities:

• Project Manager responsible for drafting PM Business Cases, tracking all security projects, assessing the security of existing & proposed projects, applications & network architecture: Active Directory, Windows and *Nix servers, SQL Server, Oracle, etc...
• Creation and review of Confidential policies and procedures and responsible for streamlining processes.
• Performing risk assessments, risk analysis, site audits, penetration testing, etc…using Security and Forensic tools such as: Foundstone / McAfee Foundscan vulnerability scanner, Core Impact, WebSense, EnCase Forensic Edition 6, AccessData Forensic Tool Kit, Cain & Abel, Wireshark, SenSage, etc…
• Worked with internal auditors Ernst & Young and external auditors Deloitte & Touche assisting with risk assessments, audits, and new project oversight.
• Performed Forensic Investigations; investigated incidents of theft and compromised data; interviewed witnesses, acquired evidence and maintained chain of custody logs working with private investigators and physical security teams.
• Managing user accounts; VPN / WebConnect Remote Access; overseeing the termination process.
• Participated in “Environment of Care” inspections with the heads of multiple department and “Compliance rounds” with the hospital Compliance and HIPAA Privacy Officer. Compliance Board Member and Change Control Board Member.
• Created security awareness training - newsletters, announcements, personalized training, intranet, presentations, and worked with Carnegie Mellon University on beta testing their anti-phishing security awareness project.
• Worked with prospective vendors evaluating products (i.e., laptop encryption, log analysis, penetration testing tools, etc) and with current vendors such as Cerner, McKesson, etc.

Confidential

Information Security Architect/Engineer

Responsibilities:

• Developed Security Policies and Procedures while ensuring that Confidential was in compliance with its own existing security policies on ePHI and other sensitive and confidential data.
• Defined IT security requirements; identified and resolved technical security issues, including security reviews of network devices (i.e., routers, firewalls, VPNs, etc.), servers, desktops/laptops, and other technologies on multiple platforms.
• Overseeing regulatory compliance - HIPAA, JCAHO, ITIL, etc.
• LAC+USC Hospital, Olive View Medical Center, Rancho Medical Center, Harbor-UCLA, King-Drew Medical Center, High Desert Health System, Ferguson Health System Administration Facility
• Conducted Risk analysis, Vulnerability scans, Security assessments, Site audits, and new product testing, including recommendations and CBA (Cost Benefit Analysis).
• Implemented vulnerability assessment scanning at all Confidential hospitals using McAfee Foundstone (appliance and scan engine application). Responsible for developing the new policy and the procedures for its continued use, as well as the following:
• Created the customized scans for all facilities and provided reports of findings to the DISO.
• Compiled and designed customized Remediation Plans for each facility.
• Performed Foundstone administrative tasks: accounts and maintenance
• Responsible for utilizing and evaluating security tools such as: WebInspect, AppDetective, Infinistream, and others.

Confidential

Senior Security Consultant / IT Security Auditor

Responsibilities:

• Responsible for performing Security Risk Assessments at Hospitals and HMO’s; focusing on regulatory compliance with HIPAA and other applicable laws.
• Conducted a thorough IT Audit of Policies and Procedures, as well as, any other relevant documentation.
• Reviewed Disaster Recovery Plans; Security Awareness training; Back-up and vaulting procedures; EDI transaction code set activity; Business Associate agreements; etc. Performed Risk Analysis with clients and participated in Risk Assessment meetings.
• Audited physical site security; building; grounds; alarm systems; guards (internal and contractual); HVAC.
• Thoroughly documented the audit and updated client at various stages. Prepared final reports for the client and conducted the presentation of findings to the board of directors, security administrators, network engineers, etc.

Confidential

Systems Administrator / Media Manager

Responsibilities:

• Responsible for security of media, off-siting, destruction, restores, and supervised bi-yearly inventory.
• VERITAS NetBackup Administration of StorageTek L700 and L700e LTO tape libraries with SN3250 Routers (Fiber to SCSI channel bridging) backing up approximately 600 clients.
• IT Security audits of Iron Mountain storage facilities.

Confidential

Help Desk / NOC Analyst

Responsibilities:

• 2nd /3rd level supervisory support for the global network operations center (GNOC) for Twentieth Century FOX.
• Global Network alert monitoring of Cisco Routers, Switches, Hubs, Firewalls and DSL lines etc. with HP Openview
• Monitored the security and function of the NT Servers via Compaq Insight Manager and Novell Border Managers.
• Responsible for resolution of all Customer Support Center/ Help Desk issues during the 3rd shift, for approximately 5,000 on lot users as well as users at remote locations worldwide (New York, Paris, London, Japan, Singapore, Australia, etc.).
• Responsible for general maintenance, monitoring, hard drive installations, etc. for the Novell Servers, NT Servers, SAN, AS/400, UNIX Servers.
• Maintenance and security monitoring of the GroupWise Async dial-in gateways, Post Offices, and MTA’s on the Novell servers via remote Rconsole and at the server level. Responsible for the monitoring of email gateways, databases and the UNIX send mail processes in Domino Administrator, as well as troubleshooting user issues with Lotus Notes clients.
• Utilizing Cheyenne ArcServe (GUI interface and console) for file backups and restorations.

Confidential

Technical Support Lead

Responsibilities:

• Technical support for PCs and Laptops running Windows 9x, Windows NT, Macintosh and iMAC (OS 7.1 and up), and "other OS" such as UNIX and WebTV, dealing with all issues of connectivity, routing, email support, ftp, and telnet.
• Promoted to Senior technician supervising a team of fifteen techs. Handling schedule changes, monitoring calls for QA and taking supervisor calls when needed 2-3 days per week.
• Technical writer for Vantive Knowledge Base, FAQ and Confidential Customer Website.
• E-mail support for all versions of Netscape Mail, Outlook, Outlook Express, Netscape Communicator for both PC and MAC.
• Maintained detailed records using Vantive database, recording steps taken towards resolutions. All Internet support on multiple OS platforms.
• Utilized Linux utilities to troubleshoot email boxes and passwords, as well as using nslookup, ping, and poof for connectivity issues.
• Specialized in quick analysis and resolutions for all customer care issues. Resolved anywhere from 30 to 70 calls daily with a resolution rate of 97%.
• Fielded salvage calls and assisted members with basic computer operation and maintenance.
• Application support for MS Office Suite, HTML Editors, Website Maintenance.