Senior Information Security Consultant
Confidential · Contract
Jan 2025 - Present · 1 yr
Remote

Develop, Design, and Review risk assessments and vulnerability scans of client networks and systems. Developing and implementing robust security controls and countermeasures to mitigate identified risks. Designing and deploying secure architectures for cloud, on-premises, and hybrid environments. Providing guidance on compliance with industry regulations (e.g. HIPAA, PCI-DSS, GDPR, NIST 800-53). Collaborating with clients to develop and implement incident response and disaster recovery plans. Conducting regular security audits and assessments to ensure ongoing compliance and security posture.

Details available upon request.
Develop, Design, and Review risk assessments and vulnerability scans of client networks and systems. Developing and implementing robust security controls and countermeasures to mitigate identified risks. Designing and deploying secure architectures for cloud, on-premises, and hybrid environments. Providing guidance on compliance with industry regulations (e.g. HIPAA, PCI-DSS, GDPR, NIST 800-53). Collaborating with clients to develop and implement incident response and disaster recovery plans. Conducting regular security audits and assessments to ensure ongoing compliance and security posture. Details available upon request.

Skills: Leadership · Programming · Cybersecurity

Extra Details:
I was a short term director for American Technology Services (ATS) Cyber Security Services as part of a contract role to help elevate their SOC services.
I helped restructure their SOC flow, train the team on proper triage processes and uplift the training of the manager. While doing this, I directly handled their largest fintech client to get their Vulnerability Managment Program back on track with Qualys over a 3 month period. I defined the scans, built custom reports, and built several scripts to align internal labels to Qualys tags and groupings to help Executive leadership get the data they needed. I was in this role from Jan - July

I am currently employed at a contract role with a mid-sized supplyer in the US Defense Space market. I am in charge of all SOC operations covering Alerts, DFIR engagements, Vulnerability Management. I also run the automation operations, including writing code, SDLC, and deployment. I am responsible for multiple Microsoft tenants across multiple countries. Due to the nature of the engagement, writen details are limited, however, some details can be discussed via the interview.
I started this role in June.