California State University-Sacramento

Enterprise Security Architect at Dataguise

Investigate, support, and maintain US/EU security tools.
Create, maintain, and influence policies and the company's security direction.
Acting as the liaison and bridging gaps between China and America's security operations.
Security Risk Assessment in existing and new projects.
Third-Party Risk Management for onboarding new projects.
Leading security awareness training and phishing campaigns.
Established US incidence response plan and led Incident Investigations in US/EU regions.
Architecting solutions architecture around current existing projects to meet compliance and regulations for US/EU/UAE regions (VARA/PII/ISO27001).

Okcoin

Senior Security Operations

Led technical discussion and proposals with security and privacy decision makers resulting in an increase of over $3 million dollars in revenue in 3 years.
Architect, implement and followed up on discovery, masking, and encryption solution to be compliant with PCI, PII, HIPPA, CCPA and GDPR for customers’ traditional and non-traditional data warehouses (S3, SQL, etc.).
Led design discussions around data privacy design for large financial customers that resulted in continuing deployment and contract renewal with over 300,000 in revenue increase along with contract renewals.
Implemented and maintained internal facing AWS environment to reduce cost and increase efficiency with Lambda functions and API gateway.
Led technical collaboration with partners to increase integration capabilities to satisfy customer’s requirements.
Led and collaborated with partner engineers to continue expansion efforts with API of partner’s solution and increase presence in our customer’s environments resulted overall customer base increase.

PKWARE

Senior Enterprise Security Architect

Discovered company’s data exfiltration incident and led incident response team to recover and protect company’s intellectual property as well as created procedures to prevent future incidents.
Designed and maintained network architecture and security configuration for multinational corporation.
Develop and maintain comprehensive organization-wide information privacy and security policies for on prem and SaaS product.
Performed risk assessment and led the effort of ISO27001 certification.
Maintained and administrated Azure and AWS environments.
Implemented and supported enterprise-wide endpoint security, DLP and log aggregation suite.

WeRide.ai

Senior Cybersecurity Engineer

Established the Information Security Operations Center (SOC) with solutions and procedures that protected the organization and customers.
Aided in hiring, mentored, then led SOC team members in daily incident operations and training exercises.
Project lead on enterprise-wide deployment of SIEM, DLP, email security, vulnerability management, network access control, incidence response and endpoint security suites.
Led and Managed Microsoft On-prem tenancy migration to a hybrid environment with O365 and Azure.
Successfully spearheaded CIS, NIST and FedRamp compliance projects.

SMUD

Senior Cyber Security Engineer Lead

Help establish a connection between people, security and business.
Consulted Cyber Security needs for businesses.

Chai Tech Consulting LLC.

Owner

Analyze, develop and document processes and workflows surrounding IT best practices in regards to Information Security at SMUD. 
Initial escalation point of contact for all level one iSOC analysts. 
Investigate and research alerts from security tools. 
Performed specialized support for Qradar, Proofpoint and other security tools.

 Led and established a fully functional Information Security Operations Center (iSOC).

 Organized and lead regular iSOC meetings, with level one analyst, to identify, analyze and improve existing policies, processes, and workflows.

 Mentored and knowledge transferred to newly hired interns and employees.

 Acting subject matter expert in the procurement process of User Behavior and Entity
Analytic solution.

Cybersecurity Engineer Lead

Work with industry leading SIEM solution to identify, assess and triage offenses by means of event log and network flow analysis. Create custom tuning rules that help eliminate offenses generated due to false positives. Help drive policy and standards development by documenting work processes that aid in the migration to a unified platform. Monitor Altiris ticketing system and address customer requests, meeting all required SLA timeframes. Escalate high priority items and possible incidents to Level III engineers as needed. 

Security Tool Management:
•	Cylance Protect:  Analyze malware data to identify compromised assets.
•	Proofpoint / Websense:  Analyze data, identify need and implement e-mail and web filters where necessary, identify and document usage policy and manage white- and blacklists.

Accomplishments:
•	Great customer support resulted in an increase of awareness for Information Security team within SMUD.
•	Implemented organization-wide email filter that resulted in the elimination of over 1 million junk emails.
•	Created and maintained multiple knowledge shares for Information Security team for future interns.

Security Operations Center Analyst

Repaired, upgraded, and diagnosed issues with university computer software and hardware. Worked with a team of IT consultants to resolve college-wide IT problems. Rebuilt workstations, OS administration, virus identification, decryption and removal, etc. 

Accomplishments:
•	Successfully decrypted and cleaned TeslaCrypt Ransom ware.
•	Rebuilt the classroom for ECS Information Assurance Lab with a Network room included from start to finish.

Qixuan Chai