Responsible creation of the cybersecurity program, employee training, and architecture of the system/network design in regard to security.Improved the company’s security posture by:- Improving on the company employee training program- Creating or modifying policies or procedures such as Cyber Security policy or Incident Response plan- Evaluated and suggested area’s for improvement within the company’s architecture or security tools- Created and provided to the CIO, a weekly high level health reports for the company, by utilizing the logs of security tools used, such as AV, FW, Email, etc.

Co-founded HackCFL, a information security community that provides learning opportunities and networking opportunities.

Responsible for the maintenance of the Information Security Program, which includes policy, standards and guideline creations, monitoring, detection and incident responseProvided PCI Compliance by ensuring:- Network segmentation of the payment card environment- All non-encrypted transmission services such as FTP are restricted at the network level- Only secure card processing applications are deployed on production systems- Server access, requires an access log, by either badge access logging or written log- Default passwords are changed before placed into production for payment processing, and all in-frastructure equipment- All employees were kept informed about the information security policies by ensuring the poli-cies were part of the company security training programProtected company and customer data by:- Maintaining, and updating, Palo Alto firewalls for both Pet Supermarket and Pet Valu - Designed, implemented, and maintained firewall security policies on Palo Alto firewalls- Protecting company data by creating network and account segmentation between user depart-ments- Maintaining Sophos Antivirus, and created procedures for mitigation efforts- Changing the company culture from “employee trusted” to “least privilege”, by designing net-work segmentation and auditing Active Directory security groups- Designing mitigation action plans from annual penetration test results- Assisting in the development of security architecture, policies, standards, and guidesProvided the company additional value by:- Providing operational teams support, for general architecture guidance, to adhere to security best practices- Developing and maintaining documentation of security systems and procedures- Analyzed current state of security posture within the company and created, either technical or administrative recommendations, to address security gaps

Responsible for the availability of the infrastructure systems, confidentiality and integrity of informationWhile being the infrastructure team lead:- Responded to security incidents and escalated security incidents as appropriate.- Monitoring system logs, and network traffic for unusual or suspicious activity, interprets and made recommendations for resolution.- Guided junior team members on maintaining technical operations while adhering to security best practices - Researched threats and vulnerabilities and, where appropriate, acted to mitigate threats and reme-diate vulnerabilitiesProvided the company additional value by:- Managing multiple third party vendors- Designing the network to allow for growth and provide security by adding segmentation

While working for a Managed Service Provider (MSP) was Responsible for a multi-million dollar retail company’s information security and technical operationsPerformed Information Security Incident Management by: - Testing, reviewing and revising the incident response plan periodically to ensure an effective re-sponse to information security incidents and to improve response capabilities- Conducted post incident reviews to determine the root cause of information security incidents, develop corrective actions, reassess risk, evaluate response effectiveness and take appropriate re-medial actionsPerformed Information Risk Management by:- Determined whether information security controls were appropriate and effective to manage risk to an acceptable level- Ensured that information security risk was reported to senior management in effort to support an understanding of potential impact on the organizational goals and objectivesMentored and managed the Information Technology staff in:- Deploying, updating, and maintaining SonicWall Firewalls - Coordination of remediation efforts required by audits, and documenting mitigation status

• Restored functionality for an office of 125 employees by replacing bad hardware and restoring the Operating System of a Windows 2003 Server.• Modified Active Directory / Exchange by creating, modifying and/or deleting user accounts and computer objects.• Maintained and organized User groups of network shares on a file and print server.• Supported daily computer issues for MS Windows XP, Macintosh, and Linux machines for Yahoo! Hispanic Americas office, as well as several other remote offices, by setting up machines for new hires, using Symantec Ghost server, resolving software or hardware issues, using software such as Symantec Endpoint Protection v11, Safeboot, LanDesk, Symantec Ghost Server, or Connected Backup.

Computer Specialist [Quantico Marine Corps Base] (1998 – 2002)Server Administrator (2000 - 2002)Desktop Administrator (1999 - 2000)Customer Support Specialist (1998 – 1999)• Monitored, troubleshot, and configured Windows NT Server systems, by the use of software such as IP Sentry, Systems Management Server (SMS 2.0), Dameware, Microsoft Terminal Services, and Virtual Network Computing (VNC).• Installed and supported Software such as BlackBrry Enterprise Server, Exchange Enterprise Server 5.5 on to live production Windows NT Servers.• Performed Tape backups and restored information using Veritas backup software.• Showed customer service skills, by performing the duties of and also managing, a service desk along with a local Desktop Administrator team.