Security Engineer

Resume for Jeff Mercer

[pic]

Jeff C. Mercer, CISSP

Email: ****@**********.***

Address: **** **** ****** ****

Phone: 919-***-****

Mobile: 919-***-****

LinkedIn: http://www.linkedin.com/in/jedimercer

Profile

[pic]

I am an Information Security professional with over ten years of experience

spanning the range of IT Security disciplines, and over twenty years of

computing experience. I earned a college degree in computer programming in

1999 and received my CISSP (#81554) in 2006, and hold a sensitive security

clearance with the Federal government. I currently run and maintain the

DeepMac project at http://deepmac.jedimercer.com/.

Education

[pic]

. Currently attending classes at Wake Tech Community College.

. SEC 560 - Network Penetration Testing and Ethical Hacking - SANS (2008)

. Web Application Security - CanAudit (2008)

. CCNA Bootcamp - Cisco at New Horizons (2008)

. Hacking Hands-on - IBM (2008)

. Certified Information Systems Security Professional - ISC^2 (2006)

. A.S. in Computer Programming - Santa Fe Community College (1999)

Key Skills

[pic]

InfoSec Skills Technical Skills Personal Skills

System Hardening Perl 70+ CWPM Typing Speed

Vulnerability Assessment PHP Consistently meet

Linux deadlines

Penetration Testing Windows Self-direct or follow

SCADA Evaluation Nessus instructions

Database Evaluation NeXpose Communicate

Data Leakage Core Impact effectively

Forensics Symantec DLP Work independently or

Security Integration AppDetective with a team

Hardening Standards Technical Documentation Organize and schedule

Wireless Security High literacy level

Team leadership

Tolerant and Accepting

Career Summary

[pic]

Position Held Company Period

Information Systems US Postal Service 2006 - Present

Security Specialist

Security Engineer ITC^Deltacom 1999 - 2005

IT Tech Univ. of Florida 1995 - 1999

Jr. SysAdmin Alachua Freenet 1995 - 1998

Recent Achievements

[pic]

. Enrolled in Wake Tech in Fall of 2010 to pursue further education in

Computer Science.

. Reached second anniversary of DeepMac project, an intelligence database

of Organizational Unit Identifiers for device fingerprinting.

. Identified a weakness in a major SCADA vendor's field panels and

successfully worked with vendor to mitigate issue across entire product

line.

. 2008 Best Practice Award in Information Security from the Technology

Managers Forum.

Career History

[pic]

Information Systems Security Specialist

US Postal Service (January 2006 - Current)

2 Perform vulnerability assessments across 16,000,000 IP addresses spread

over 36,000 locations throughout the USA, determining compliance with

AS-805, PCI and SOX.

. Architectured, built and documented complete scanning toolkit, reducing

required scanning tools and working hours for assessments.

. Created an award-winning secure scanning enclave, saving USPS over

$10,000 per year in travel costs.

. Recognized by US Postal Inspection Service for significant contribution

to USPS's security.

. Performed full on-site assessment of primary and secondary datacenters.

Security Engineer

ITC^Deltacom (November 1999 - December 2005)

3 Manage corporate-wide AntiVirus for over 600 systems, perform

vulnerability assessments on 200+ servers in major datacenter, review

and test security solutions from vendors and respond to security

incidents.

. Successfully reverse-engineered Agobot variant in order to block

command-and-control network.

. Designed and created monthly auditing system for detecting and

disabling accounts for separated employees, resulting in over $5,000

in savings.

. Performed full migration from Symantec AntiVirus to CA eTrust

AntiVirus.

. Administered all servers for commercial ISP service (BTINet) and

performed 3rd their tech support.

. Gathered data for FBI investigation of unsolicited child pornography

spam.

. Personally disconnected network connectivity for convicted spammer

Jeremy Jaynes shortly before his arrest and conviction in Virginia.

IT Tech

University of Florida (Sept 1995 - Aug 1999)

4 Perform technical upgrades of computing equipment to enable students and

professors to more efficiently pursue academic advancement, monitor

computer facilities to protect against unauthorized access, and provide

ad-hoc computer training.

. Created scripts to automate Novell account maintenance for ECE lab.

. Upgraded Law school's token-ring network from 4MBit to 16MBit.

. Assisted with Systems Administration duties as needed.

Jr. SysAdmin

Alaucha Freenet (May 1995 - July 1998)

5 Manage AIX servers, write and maintain menu-based scripts for user

access, and assist end-users with questions or issues.

. Created offline e-mail and Usenet news reading system to allow end-

users quicker access to messages, reducing load on modem banks.

. Provided premium user support including ad-hoc lessons on the

Internet, dial-up and e-mail.

. Assisted with hacking incident by restoring systems and gathering

evidence for use in law-enforcement action.

. Made public appearance at Town Hall meeting as official representative

for AFN.

Contact this candidate