SUMMARY

• Managing projects modeled after function, design and technology attack points focused at defining the attack surface by analysing to uncover security risks as if from the perspective of an attacker, such as third party vendor tools failing compliance, TLS protocol version compliance, service and application end of life, access control, secure new hire password distribution techniques, noncompliant endpoints.
• Training teams in the adoption of Agile frameworks to complete projects that decrease risks from hidden security vulnerabilities resulting in prioritization of the highest valued projects and increasing SLA compliance by 40%.
• Guiding and training Engineers, Developers, and leadership to self lead, envision a positive shift, experiment with light Agile processes like Scrum or Kanban, estimate and prioritize in an Agile - Lean manner.
• Administering project management or Agile tools, bug trackers, and knowledge management software as the entrepreneur for the organization; Org62, Supportforce, Grand Unified System, Confluence, Jira, Trello, Smartsheets, Zendesk.
• Innovating new ways for automating inbound and outbound interdepartmental workflows where the rate at which vulnerabilities are mitigated increase by 50%.
• Key player assisting the crisis management team in determining roles, processes and recovery strategies required for implementing an Enterprise Security Business Continuity Plan to prepare, respond, recover and restore the company after any major incident.

PROFESSIONAL EXPERIENCE

Confidential - San Francisco, CA

Technical Project Manager

Responsibilities:

• Managed projects that close the gaps exploited by threats to gain unauthorized access including TLS/SSH standards, HTTP to HTTPS, and DDoS protection.
• Increased organizational SLA compliance by 40% within two quarters by facilitating leadership’s Security Scrum of Scrums where I brought continuous planning, open communication, clear accountability, KPIs and KRIs into practice that decreased the risk to areas of the critical infrastructure.
• Trained Product Security team engineers in Agile-Lean principles, Scrum, Kanban, Confluence and Jira by coaching on best practices with the pull system that allowed them to experience what it means to stop starting and start finishing.
• Guided leadership to adopt a proactive Agile approach at managing inbound critical deliverables by devising a streamlined tracking process with self-help dashboards and automated notifications using Jira subscriptions and facilitating the retrospective conversations.
• Conducted due diligence by setting goals and plans with Compliance, Legal, Professional Services and Marketing to ensure clear communication with clients and partners that aligned with all contractual agreements.
• Paved the way for additional improvements by developing, presenting and implementing a new Vulnerability Management workflow process that improved collaboration within DevOps, and brought increased efficiency to the release planning process.
• Addressed customer concerns with a revamped Critical Vulnerability Process that brought clarity to the All-Hands-On-Deck approach across DevOps teams and leadership.

Confidential - San Francisco, CA

Agile Project Manager

Responsibilities:

• Scrum Master that facilitated a 60+ attendee Sprint Review for executive leadership to present accomplishments and objectives that focused on removing obstacles, continuous improvement, achieving results that created a safe environment for sustained creativity and motivated leadership to further their understanding of Agile.
• Devised workflow, process and prioritization improvement ideas and options using dashboards and metrics that engaged leadership to improve transparency into key programs which became the example for the rest of the organization.
• Applied Agile-Lean work methods that extrapolated specific pain points, engaged 4 separate teams with new work habits that brought about documented estimation, prioritization, and collaboration processes into existence for completing the highest valued work items.
• Negotiated for prioritization of highest risk remediation projects and managed to improve inbound/outbound workflow response rates by 50% among Security Assessment, Product Security, IT Infrastructure Security, Infrastructure Production, Detection and Response teams.
• Partnered with Development and Security teams to create a scheduling application that automated how leadership managed key deliverables and due dates that ended an unsuccessful critical drive-by delegation approach.

Trust Enterprise Security Analyst

Responsibilities:

• Reduced endpoint vulnerability incidents by leading projects to improve security posture; Password Distribution, XP Eradication, Noncompliant VM removal. Guided and engaged business units to a feasible approach and expedited workarounds.
• Streamlined the Software Review process, Security Queue Focus process, Software Purchase process, Whitelisting Custom Rule Review process, and led the Supportforce Hidden Fields project that automated data extraction for integrity analysis.
• Created a self sustained process for global application whitelisting that fortified cross training to increase and maintain ample analyst to end user ratio for support. The program continues with minimal impact to end users while keeping the business on track with strengthening the overall security posture.
• Member of Business Continuity Plan Governance structuring and identifying critical business processes for business continuity.

Senior Remote Support Analyst

Responsibilities:

• Developed, implemented and owned central support areas; mobile devices, RSA, Software requests, LiveOps, Call Manager resulting in 30% more headcount and transformed the Helpdesk to a Global Service Desk with more feasible analyst to end-user support ratio.
• Started the first central support hub for procedural change notifications with my new Mobile Everything Team that proved to transform a negative end user experience into an overall positive end user experience.
• Came up with several new program initiatives that spawned cross-departmental training and opened communications between Global Service Desk and Information Security for Application Whitelisting, Network Access Control troubleshooting, and for reduced call backs that ensured consistently effective resolution for common requests.

Confidential

Senior Associate Network Services

Responsibilities:

• Maintained 96% SLA compliance for Enterprise Network Response and promoted to Senior level.
• Three successful office moves, router, switch, UPS reconfiguration, cable and switch label management.
• Conducted Exchange 5.5 to 2000 and NT 4.0 to 2000 migration projects.
• Implemented a capacity management plan that increased Network Appliance capacity by 40%.
• Supported core business applications including remote access, content management systems, and Citrix.
• Administered Active Directory, Group Policy Management Console, Network Appliance, File Transfer Protocol server, and managed Netbackup and disaster recovery operations.