Harrison Memorial High School

Northcentral University

Universidad de Montemorelos

Stony Brook University

Northern Caribbean University

VP  -  Business Information Security Officer (BISO)  -  Doctoral Candidate  -  CISSP, CISM  -  Executive Cyber Security Consultant  -  Cloud Security Compliance  -  InfraGard Alliance - FBI  -  Inclusion & Diversity  -   Collaborator

Greater Chicago Area

As a senior business information security officer in my organization, I provide expert knowledge and oversight of network security, cloud security, and compliance issues. I work closely with the CIOs/CTOs of my designated line of business, to provide thought leadership and security expertise related to specialized risk-based endeavors and discussions. I provide leadership on policies, knowledge, and security controls relating to specific challenges across our enterprise. I provide expert knowledge on Cybersecurity to enterprise vendor managers, third-party compliance teams, application owners, assessment teams and provide decisions on strategic enterprise security endeavors.
I conduct decision-making on risk exceptions, security strategies, and provide oversight on compliance issues that affects the security posture of my organization and my line of business. I am a key stakeholder within my organization making sure that my company in its relationship with vendors, partners, and other third parties, continues to adhere to the highest standards of Cybersecurity, on-prem and in the cloud.
            

    
    

    
        Show less

Bank of America

Vice President, Global Information Security Organization.

Provided Security by Design oversight and compliance for all projects initiated within HCSC. Resident expert on Security by Design, providing guidance across IT Security Domains (Authentication, Authorization, Access Management, Cryptography, Network, Logging/Auditing, and Application Security). Managed and provided Security oversight to completion, on all IT projects. Enforced security architecture principles, security best practices, security control frameworks, policies, and standards on all projects. Utilizing threat modeling techniques and deep dive analysis to establish the true security posture of all third-party integrations. Prioritizing risks, and managing all security remediations for IT Integrations and projects. Provided final authorization on security for all projects. 
            

    
    

    
        Show less

Blue Cross and Blue Shield of Illinois, Montana, New Mexico, Oklahoma & Texas

Sr. Cybersecurity Assurance Architect (Contractor)

Managed Service Provider

Managing Director - Cybersecurity

CyberSecurity Manager as an operational resource, identifying potential gaps in the existing security practices compared to the client expectations for delivery of services to the client as well as develop solutions to close the security gaps. Clear definitions of major and minor security threats for the specific solution are determined during the initial phases of the project, together with planned remediation, resulting in a project security threat matrix. The CyberSecurity Manager role requires working with client auditors and regulatory authorities as required. My role is to ensure that or security delivery environment is periodically assessed for risks through a formal risk assessment activity. Vigilance and compliance is evaluated by holding periodic review meetings with the clients Information Security representative as part of the contracts governance process. Working knowledge of HIPAA, PCI-DSS, ISO 270001. Responsible for Launching of Vulnerability, Compliance tests, Audit follow up, Security Incident management, security risk management. BCP and DRP review, follow up on ongoing actions, launched and proposal. Assessment of new proposal or improvement and new design of security solution proposed. Communicating well with business units and managers. Experienced with IT infrastructure architecture. Effective advisor to the senior client security leadership. Responsible for all security details across all towers in the organization. Making sure that all security projects align with business objectives.
            

    
    

    
        Show less

Unisys

CyberSecurity Manager - Client Facing.

Security Consultant
Value added reseller (VAR) and Professional Services Firm - Chicago, IL-February 2016 to October 2016
Responsibilities
Senior Security Consultant in all aspects of Security delivery. Specializing in tailoring security solutions to enable our clients business goals and lower their threat profile. Our professional services portfolio delivers for our clients, Firewalls, Intrusion Detection Systems, Anti-Malware, Web and Email Gateways, Endpoint security, Mobile, Cloud, Identity and Access control, SEIM, Database monitoring, Encryption, DLP, Risk and Compliance, Vulnerability Assessments, Penetration Testing, Secure Perimeter, Healthcare Security, vCISO services, Complex deployments and on-going support.  
            

    
    

    
        Show less

ePlus inc.

Sr. Network & Cybersecurity Engineer

Governance, Risk and Compliance (GRC) - Role: Key point of authorization and compliance on all projects moving into the new data center. Member of data center architectural design board responsible for the final network security policy documents outlining all access control conduits. Maintaining strict control on all network zones, by vetting all communication links ingress and egress. Managing all PCI/SOX and Security zones to enforce strict adherence to security policy. Liason with Application owners, Server owners, database owners, Project managers, and Systems engineers to guide expected adherence to the network security policy.
Long term Project: The migration of multiple IPSEC tunnels to a new DC.
Utilization of IPSEC, ISAKMP, IKE, OAKLEY, AES-256, Key Exchange Mechanisms and Encryption Algorithms to establish IPSEC Site to Site VPN tunnels. Interoperability between various vendor equipment to achieve desired results. Checkpoint VSX, Cisco ASA and other network equipment utilized in project. Monitoring of all Network traffic and hardware for anomalies or alerts pertaining to compromises or equipment failures. All project work must be carried out with proper change management guidelines, as all major network changes can impact airline traffic patterns and operations.

        Show less

United Airlines

Sr. Cybersecurity & Network Security Consultant

Establishing secure connections using military grade Encryption and protocols to
create communication links for vendors and partners interfacing with the
Government. Practicing the principles of SIEM to mitigate againsts APT's and the consistent insider threats. Keeping up to date on the threat actors both foreign and domestic, understanding the current threat market place, the motivations and target acquisition scenarios. Making sure that all communication software and hardware of vendors must follow FIPS 140-2, Military grade standards for Confidentiality, Integrity and Availability. Strict
Identification, Authentication, authorization and monitoring of all users. All equipment must rigorously adhere to a federally trusted computer base (TCB), which is enforced. Utilization of IPSEC, ISAKMP, IKE, OAKLEY, AES-256, Key Exchange Mechanisms and Encryption
Algorithms to establish IPSEC Site to Site VPN tunnels. Monitoring of all Network
traffic and hardware for anomalies or alerts pertaining to compromises or equipment
failures. Working with various groups within the Government on short and long-term
projects. Liaising directly with Project managers on the network security/connectivity
aspects of projects. Designing, configuring and driving the technical details of Secure
communication links with partners. Remote access administration utilizing Cisco
ACS,CAM, AnyConnect, Cisco ISE, Netscalers and Citrix XenDesktop
            

    
    

    
        Show less

U.S. Department of Veterans Affairs

Sr Cybersecurity Engineer

Server upgrades, Network upgrade.  Installation, configuration and maintenance of Network backup system. Firewall installation, configuration and maintenance. Network user security and access controls. Implementation of proper network authentication methods. Managed users remote access into network using RDP protocol. Active directory (AD) configurations.
Interoperability of Xray system using DCOM protocol. Maintenance and uprades to Clinic website in Spanish and English.

Urgent Family Care

Network Administrator - Medical Clinic

Performed ticket queue monitoring, and prioritization
Performed required maintenance for installation, configuration, and updates to firewalls, and VPN connections.
There were two Security groups at Rackspace at the time, Managed Security and Intensive Security.
I worked with the Intensive Security team during all my time at Rackspace. Fast-paced, and Fortune 100 & 500 customers. As the name implies, all customers assigned to the Intensive Security team had little tolerance for downtime or delays.
Carried out regularly troubleshooting of customer IPSEC client and site to site VPN connections
Deployed and tuned Cisco IDS sensors, and configured monitor sessions on the access switch
Setup, configured, and troubleshoot and administered Cisco CSS content switches and Webmux load balancers.
Maintained customer DNS Zones including updated and performed migrations, and
Interacted directly with customers via telephone to assist in setup or diagnostics of customer environments.
Was responsible for provisioning, routing, and documenting IP address allocations for customer equipment.
Used various 3rd party tools to monitor and address issues within the DC on all customer equipment.
Rackspace had nothing but an awesome Team culture, and each team member was equipped to work solo using  traffic analysis tools, debug tools, and performed traffic analysis utilizing vendor tools.
            

    
    

    
        Show less

Rackspace Managed Hosting

Network Security Administrator

I worked on a temporary assignment to assist a Lan Administrator at KB Home to migrate a network to active directory in a Windows NT / XP environment.
Great assignment, the Lan Admin has become a good friend of mine and we get along very well. It was a pleasure to pick up the slack when he had to go on a short vacation. It was a pleasure working at KB, great company!

Countrywide KB Home Loans

Migration Specialist /

Migrated network to multiple new network Domain controllers.

KB HOME

Migration Specialist

Worked on Team in charge of Network Infrastructure security; 250 Cisco Routers, Switches, Cyberguard firewall, Checkpoint firewalls and Unix based Proxy servers.
Largest client was DuPont America. Worked with other DuPont companies worldwide, mainly India, Philipines, Spain, England and other location to assist in implementing security configuration with regards to firewalls and router configuration.

CSC - Computer Sciences Corporation

Firewall Engineer

Project Manger - Responsible for coordinating, personnel, resources, time-lines and all deliverables. As a technical Project manager i was expected to guide the team in terms of what specification we needed in our project in terms of what type of servers, network technology of protocol were needed on each project. Risk Avoidance/mitigation had to be considered, identified and planned in each project. Project scopes needed to be clearly identified in terms of what were responsibilities of ourselves and our clients responsibilities, so that milestones were met and the customer / client was satisfied at the end of every project.
            

    
    

    
        Show less

Project Manager

Hired as a Consultant / Systems Engineer to work on a RED TEAM, as part of DuPont's Y2K project. This entailed bringing all of DuPont non-compliant Network infrastructure up to Y2K compliance. The scope of this project required that full-scale network migrations be done from Novell 3.12 networks to Windows NT Servers and clients. All planned migration across the North-East, the region we were responsible for in this RED TEAM project, were executed before the planned milestone and DuPont was very satisfied. Projects spanned Virginia, Twanda Pennsylvania , to New York and other locations.
            

    
    

    
        Show less

Consultant – Migration/Systems Engineer

Network Engineer specializing in network software distribution and Network Administration. I was recruited into the company for my knowledge of Microsoft's SMS software used to distribute in viral fashion, software packages across a network.
We were also responsible for being the support headquarters for the 53 Lan sites across the USA. We would be the first line of defense for Lan Administrators at these sites needing support with regards to their applications, SQL server and Windows NT servers.
            

    
    

    
        Show less

ADP - Advanced Data Processing (HQ)

Consultant SMS Specialist

Manged and directed IT Projects. I was a technical project manager meaning i executed and directed the technical aspects of the IT business. For example, plan, direct, execute and lead IT projects.

System Engineer. Worked on Red Team, migrating DuPont's IT networks to compliant NT networks.

Engineer

Network Security. Network equipment procurement, installation, configuration and administration. Cisco ASA5500's, Pix firewalls, Checkpoint firewall installation, configurations, installations. 6500 catalyst switches. Active directory (AD) configurations, automations, scripting. Domain administration. Network migrations, upgrades, troubleshooting.

Administered SMS network, and supported Network administrator at 53 sites across the USA

SMS Engineer

Responsible mainly for Application, Network Client configuration and support. Occasionally Network Server admin. We were the first line of defense with regard to user concerns, break fix and new installs. A very dynamic environment of constant calls, tickets and support to executive end-users and other staff.

Citicorp (Now Citigroup)

Network Specialist

Supported entire card services division with all desktop related network issues

Lloyd Dennis

Lloyd Dennis