Director Resume
Aldie, VA
SUMMARY:
Listener, collaborator, and executor. Experienced Confidential leader in information technology operations. Effective in working across cross - functional areas of an organization, promoting security initiatives, and leading across multiple stakeholder sets. Thirteen years of experience in advanced technical security operations and leading teams in the creation, rebuilding and implementation of Confidential programs.
AREAS OF EXPERTISE:
- Advanced Security Operations
- Security Metrics & Governance
- Capability Development
- Thought Leadership
- Security Program Mgt.
- Crisis Management
- Security Evangelist
- Budget Planning & P&L
- Stakeholder Management
- Security Culture Development
- Performance Management
- Team Leadership
PROFESSIONAL EXPERIENCE:
Confidential, Aldie, VA
Director
Responsibilities:
- Develop Confidential roadmap for internal security and delivering security services
- Overhauled MSSP delivering managed threat monitoring, incident response, and vulnerability management services
- Created incident playbooks, run books, procedures, best practices and standards for delivering expert-level security services
Confidential, Arlington, VA
Director - Incident Response
Responsibilities:
- Delivered/managed dozens of engagements for commercial clients across all 20 NAICS codes
- Concurrently managed engagements including planning, identifying resources, providing expert analysis, reporting and supporting remediation.
- Created incident playbooks, run books, procedures, best practices and standards for delivering expert-level IR engagements
- 100% client retention rate by earning trust through delivering outstanding service and analysis
Confidential, Herndon, VA
Senior Director - Confidential
Responsibilities:
- Overtook Cybersecurity Practice responsible for delivering a managed services security program (MSSP) and consulting services to 14 Confidential customers
- Improved MSSP service delivery, capabilities, while turning around financial performance (from -$2m annual loss)
- Engineered and implemented a full, robust, cyber solution for the TSA computer network defense (CND) contract to include security monitoring, incident response, and threat intelligence to secure $60m, 10 year, 45-seat contract
Director - Confidential
Confidential
Responsibilities:
- Developed and managed annual budgets ($5m/annum) and team (15 employees) performance
- Developed a unique M&A risk management approach and security architecture review process to evaluate the security posture of new projects
- Worked closely with SRA executives and groups to evangelize security initiatives and in integrate security across corporate departments, programs, and IT projects
- Briefed SRA executives on high-risk security issues, internal investigations, and risk assessments
Team Lead
Confidential
Responsibilities:
- Built out various capabilities including network monitoring, incident response, forensics, vulnerability management, penetration testing, malware reverse engineering and cyber threat intelligence analysis
- Improved consumption/exchange of APT-related threat intelligence information from the DOD-DIB, FBI, and other partners
- Trained team in performing efficient investigations, analysis and effective security tests
Confidential, Arlington, VA
Senior Penetration Tester
Responsibilities:
- Worked closely with threat intelligence and malware reversing teams to understand and simulate attacker techniques, tactics, and procedures (TTPs)
- Developed various attack platforms, methodologies and approaches to conduct testing
Confidential, Alexandria, VA
Vulnerability Assessment Lead/Intrusion Analyst
Responsibilities:
- Enhanced SEC's security posture by designing and implementing SEC's enterprise-wide vulnerability management program to include vulnerability assessments (OS, web, database, and wireless), vulnerability remediation and patch management
- Performed incident response and security event monitoring and using SIEM and other network security and security event detection tools
Confidential, Arlington, VA
Security/Network Engineer
Responsibilities:
- Managed and maintained IT and security program
- Assisted with PCI compliance efforts.
