Profile ~ IT Security Manager ~ IT Security Architect ~ IT Security Engineer
Highly motivated, organized, and proactive IT professional with comprehensive technological knowledge and experience looking for an IT Security leadership role. Over 15 years of proven IT experience and a track record of promotion at global Fortune 500 organizations such as Jacobs Engineering. Expert research, problem-solving, and troubleshooting skills. Strong leadership & interpersonal abilities and excellent communication skills both in oral and writing.
Areas of expertise and experience include:
- Security Architecture
- Security Governance
- PCI Compliance
- Systems Security
- Network Security
- Global Security Policy
- Security Auditing
- Vulnerability Assessments
Professional Experience
MOVE INC, Westlake Village, California – 2007 – Present
Senior Security Architect / Interim IT Security Manager
- Provided leadership and technical expertise for global security projects such as Identity Management, Security Information & Event Management (SIEM), Web Application Firewalls (WAF), Web & OS Vulnerability scanning and assessments, Global Antivirus, Intrusion Prevention/Detection, Penetration Testing, Configuration & Patch management, Enterprise Firewalls, and more.
- Provided leadership and technical expertise for company compliance initiatives such as Sarbanes-Oxley and Payment Card Industry (PCI) Data Security Standards.
- Provided leadership in establishing architectural security strategies, secure software plans and the development of more secure systems and infrastructure.
- Developed and implemented information security controls that are appropriate for the organization and have performed enterprise wide security assessments to measure the security posture of the entire organization.
- Responsible for working with developers and engineers on application security throughout the enterprise and providing leadership to other security engineers on application security.
- Research emerging threats, stay abreast of technological trends, and report risks to the organization.
- Provided management and coordination for the company’s incident response team.
FOX TECHNOLOGIES, Northridge, California – 2006 – 2007
Presales Engineer / Sales Consultant
- Provide technical sales support to regional sales managers, customers and prospects.
- Assisted customers and prospects by providing technical solutions using the Fox Identity and Access Management software suite & asssited prospects through technical evaluations of FoxT’s software
- Create and present product demonstrations of FoxT’s BoKS software suite via web conference and at customer sites in the U.S. along with developing technical sections of proposals and answers to RFI/RFP.
- Provide input / involvement in product related services engagements (scoping, SOW creation, positioning).
- Define and achieve client needs through one-on-one sessions and on-going communication.
JACOBS ENGINEERING GROUP, Pasadena, California – 2000 – 2006
Senior Security Architect ~ promoted from Senior Network Engineer
- Contributed to new global security policies and practices and assisted with Sarbanes-Oxley auditing.
- Serve as the technical security lead for global security projects such as ones to select Identity Management, Security Information & Event Management, Web Application Firewalls, Web & OS Vulnerability Assessment, and Global Antivirus tools. Research and assess vendors and propose solutions. Also act as security advisor on projects like HR system upgrades, Intranet portal upgrades, and payroll/timekeeping software upgrades.
- Serve as the technical security lead for Jacobs Engineering systems and network infrastructure consisting of over 300 offices and 40,000 users worldwide.
- Perform network and web security/vulnerability assessments and audits using open-source and commercial tools on new connections to the network such as new employee offices, business partner connections, and client connections as well as with any new applications or systems placed on the network.
- Research emerging threats, stay abreast of technological trends, and report risks to the organization.
- Develop, implement, and manage open-source intrusion detection systems such as Snort and Tripwire.
- Configure and administer Cisco VPN Concentrators and Whale SSL VPN Gateways.
- Design, configure, and administer various firewalls such as Check Point, Netscreen, Raptor, and SonicWALL firewalls and also configure VPN tunnels between them.
WMC MORTGAGE GROUP (now part of GE CAPITAL), Woodland Hills, California – 1999 – 2000
Lead Information Specialist
- Developed and implemented company’s security policy.
- Implemented, configured, administered, and maintained this mortgage brokerage firm’s systems consisting of over 200 servers including Windows NT and Sun Solaris systems, Linux-based servers running services such as BIND and SENDMAIL, SCO UNIX systems used for automated telephone dialing (i.e., telemarketing), Microsoft IIS Servers, and SQL Servers.
- Monitored network health using tools such as Cisco Works and Network Associates Sniffer Pro.
- Implemented, managed, and supported solutions such as Network Associates Gauntlet Firewalls, Cisco Catalyst Switches, F5 Networks BIG-IP, Network Associates PKI server and Microsoft Windows PKI Server.
- Planned and managed roll-out of Windows 2000 Servers, Active Directory, and Exchange Server 2000.
TECHKNOWLEDGE SYSTEMS, LLC, Encino, California - 1999
Technology Manager
- Played a key role in launching and managing the Systems & Network Engineering Division for this small software development firm. Planned and managed budgets, sales opportunities, and technical implementation projects.
- Administered systems and networks for both clients and internal operations.
- Installed, configured, and supported Microsoft BackOffice-based products, Cisco Remote Access Routers, MAS 90, Microsoft Windows NT Server, NetWare, and firm’s custom-developed databases.
- Provided end-user training and contributed to new business development proposals and pitches.
- Improved access to key systems and lowered costs by implementing Virtual Private Networks that enabled employees and clients’ remote employees to connect via their own ISP Internet connection.
REAL APPLICATIONS, LTD. (a division of El Camino Resources), Woodland Hills, California – 1998
Systems / Network Engineer
- Provided support to IBM RS/6000, AS/400, and Netfinity customers and to customers using Microsoft BackOffice-based products for this reseller and integrator division of El Camino. Specific issues and subject matter supported included: Windows NT to AS/400 connectivity, Windows NT to RS/6000 connectivity, running Windows NT on the AS/400 IPCS card, and Cisco routers.
- Educated salesforce about both Microsoft and Netfinity products and collaborated with them on sales calls as a pre-sales engineer.
- Implemented IBM ADSM back-up system on all servers and workstations for El Camino parent company and continued to assist the parent company with network administration tasks.
EL CAMINO RESOURCES, LTD., Woodland Hills, California – 1995 – 1998
Systems / Network Engineer ~ promoted from Help Desk Associate
- Designed, set-up and administered networks, servers, and e-mail for over 20 sites worldwide for this global IBM hardware leasing company. Designed and deployed a global network using Cisco routers and frame-relay circuits.
- Rolled out Windows 95 to the entire organization of more than 1,000 PCs, used Microsoft SMS to deploy Office 97 to all 1,000 PCs, and managed migration from MSMail to Microsoft Exchange.
- Developed and deployed an enterprise-wide back-up solution and improved the administration of all network devices by implementing enterprise network management software.
Additional Information
Current Certifications:
Certified Information Systems Security Professional (CISSP) / A+ Service Technician
Held following certifications on older platforms:
Certified NetWare Administrator (CNA) / Check Point Certified Security Administrator (CCSA) / Cisco Certified Network Associate (CCNA) / Microsoft Certified Systems Engineer (MCSE) / Microsoft Certified Trainer (MCT)
Skills
Server Apps/Operating Systems: Linux / Microsoft Windows / Active Directory / IIS /
Networking Technologies: Routing, Switching, and Remote Access (IPSec/SSLVPN)
CheckPoint, PIX, Raptor, NetScreen, and SonicWALL Firewalls
Security Technologies: Intrusion Detection & Prevention, Identity Management, Access Management
Vulnerability Scanners, Web Application Scanners
Security & Information Event Management (SIEM),
