TECHNICAL SKILLS:

Enterprise Security Tools: NetWitness, Palo Alto Networks, Cisco ASA, Bit9, Log Logic, Veracode, McAfee, Symantec, PwnieExpress, Sourcefire, McAfee Intrashields, FTK Enterprise, Access Data MPE, Rapid7 Nexpose, Imation Iron Key Enterprise, Maltego Radium, RSA Security Analytics, Solarwinds

Open Source Security & Research Tools: Wireshark, Cuckoo, Metasploit, Kiwi Syslog, Maltego Radium CE, Volatility, Recon - ng, Autopsy, OllyDbg, Hex Workshop Hex Editor, CFF Explorer, PEStudio, TOR Browser Bundle, PeiD, FOCA, PEView, DCode, IDAPro, Python, Perl

Operating Systems: Windows, Linux, MAC OSX, Backtrack 5 r3, Kali Linux

PROFESSIONAL EXPERIENCE:

Confidential, Canton, Massachusetts

Global Manager

Responsibilities:

• Lead 4 engineers in daily management of security environment tools and forensics operations.
• Successfully designed and implemented Security Analytics Archiving solution to archive 12 months of log data.
• Provide monthly reports to senior management on current trending of cyber related events alerted via security infrastructure.
• Achieved 95% compliance on log monitoring audit finding within 1 month. Successfully configured and monitored Security and System logs for over 8,000 servers globally.
• Created global procedure for onboarding new servers into Log Management Program.
• Created processes and procedures for event notifications and investigation triage.
• Created processes and procedures for Security Operations to obtain daily threat intelligence and profile possible attackers.
• Increased event notifications between Managed Service Provider and Confidential by improving reporting formats.

Confidential

Security Engineer

Responsibilities:

• Designed and deployed global RSA Event Stream Analysis (ESA) appliance and RSA Global Broker.
• Successfully deployed and integrated Sourcefire Defense Center and 8 sensors in EMEA, OCEANIA and AMERICAS with RSA Security Analytics.
• Daily duties include managing and investigating Sourcefire and RSA Security Analytics alerts.
• Perform end point investigations and malware analysis utilizing tools such as Volatility, SysInternals, IDAPro, PEStudio, Cuckoo, and CFFExplorer
• Provide 24 - hour on-call support for alerts generated via Sourcefire and RSA Security Analytics.
• Primary technical contact between Confidential and 3rd party Security Operations Center.
• Gather threat intelligence via open source and analysis of found malware to assist management in decision-making.

Confidential, Boston, Massachusetts

Manager Information Security

Responsibilities:

• Lead team of four security-analyst in day-to-day security operations for an 8000 + user network.
• Defined roles and responsibilities motivated and challenged employees with small rewards.
• Implemented and manage Network Security Monitoring (NSM) program.
• Decreased incident response time by automating low\informational level alerts and increasing the amount of time an analyst had to investigate higher-level alerts.
• Rebuilt vulnerability management program introducing a procedure to verify exploitable vulnerabilities and setting SLA’s for high-level remotely exploitable vulnerabilities within DMZ applications.
• Introduced and began implementation of security code review into SDLC of applications built with internal resources for external use on the Internet.
• Utilized internal groups to rebrand Security Awareness training for end user community.
• Introduced and implemented delivery of enterprise level secure encrypted USB device program.
• Introduced forensics software to assist in network and endpoint investigations.
• Performed analysis of malware found via deep packet inspection.
• Assist Compliance, Human Resources and Legal departments with investigations.

Confidential, Norwell, Massachusetts

Manager of Information Security

Responsibilities:

• Developed and started a Security Awareness Program. Program consisted of a yearly security brochure, monthly email and a CMS (Course Management Software) solution for dissemination of policies and procedures to the end user community.
• Created and managed the Payment Card Industry Data Security Standards (PCI-DSS) Program for Confidential Uniform Services, Wearguard-Crest and Galls.
• Acted as compliance liaison between Internal Audit and IT concerning Sarbanes-Oxley, HIPPA, PCI and other regulatory controls.
• Managed and performed DR testing plans for critical applications.
• Project managed a $425,000 Infrastructure Readiness project.
• Successfully managed concurrent cable plant replacements for Norwell, Massachusetts’s office space and Salem, Virginia distribution center to provide new Cat 6 cabling for Cisco VoIP implementation.
• Project managed $250,000 network overhaul of Wearguard-Crest business unit.
• Successfully architected a flat Cisco network to a new Cisco switched environment for the Wearguard business unit over one weekend. Decommissioned 75 stackable 2900 series switches and replaced with 10 new 4500 series switches.

Confidential

Network Engineer/Senior System Engineer

Responsibilities:

• During these 7 years of my career I have advanced through several different technical and operational roles that prepared me for my senior level responsibilities.
• These roles included Senior System Engineer with Vanderweil Engineers, Network Technical Management and SAN Systems Engineer with BL Trading, Network Operations with Confidential, and Help Desk Support for Confidential and Stream International.