Engineer Security

MATTHEW KASA

*** ******* ***** *********** - ***

Chandler, AZ 85226 ************@*******.***

Cell: 623-***-****

Information Security Engineer

A highly motivated and Department of Defense Secret cleared Information

Security Engineer with over 8 years of hands-on enterprise level experience

building, maintaining and securing Military and commercial Information

Systems. Well versed in security threats, incident response, security

assessments, computer forensics, organizational security frameworks and

anti-virus tools.

TECHNICAL EXPERTISE

INCIDENT RISK ASSESSMENT PENETRATION EXPLOITATION TOOLS

RESPONSE TESTING

COMPUTER SECURITY PROCESS AUDITING INTRUSTION DETECTION

FORENSICS FRAMEWORK

SERVERS FIREWALLS PROJECT VULNERABILITY SCANNING

MANAGEMENT

PROFESSIONAL QUALIFICATIONS

8+ years of experience supporting day-to-day security operations while

acting as the subject matter expert on security exploits, threats and

vulnerability vectors across a wide range of governmental, corporate

and military organizations

Developed, maintained and presented numerous technical programs

covering security concepts and ideas to mixed audiences of technical

and non-technical individuals from military, corporate and

governmental organizations

Managed numerous security projects in high stress environments with

teams consisting of both employees, third party contractors and other

organizations employees

. 6 years of performing security assessments on operating systems,

networking equipment and application using such tools as Nessus,

Foundstone, Metasploit, WebInspect, Phonesweep, and RAT according to

existing policy and procedures

. Developed a risk assessment process based on, CRAMM, OCTAVE, MARION

and SBA risk analysis methods and used this process to generate

reports and policies that were understandable by non-technical

individuals.

. 4 years of experience of participating on a computer incident

response and monitoring teams using such tools and platforms as

Sourcefire/Snort IDS, Juniper IDP75 IDS/IPS, NetworkICE, McAfee HIDS,

McAfee Antivirus, McAfee ePO, HELIX3, TSK/Autopsy, MemParser, Memdump,

Volatility,Win32dd/Win64dd, NetCat, WFT, Encase Enterprise and the FTK

suite.

. 4 years of analyzing computer security incidents involving such

programming languages as PERL, Batch, HTML and XML

. 4 years of participation on drafting, implementing and refining

computer incident response policy, procedures, metrics and reporting

format

. 6 + years of working with clients to design, implement, maintain and

audit multi-platform systems such as Windows, Linux and Solaris,

integrated computing and TCP/IP networking environments that composed

of file servers, Active Directory servers, database servers, web

servers, email servers and workstations

. 2+ years of performing complete administration functions for

environments composed of Symantec Corporate Antivirus, Cisco IronPort

then later TrendMicro Scanmail, Windows 2000 and Windows 2003 servers,

Windows 2000 and Windows XP workstations, Juniper and RSA remote

access solutions, Checkpoint and PIX firewalls connected by numerous

Cisco routers and variety of different manufacturer switches

. 2+ years of performing forensic investigations with such tools as

Encase Enterprise, FTK, XVI32 (hexeditor), HELIX3, WFT, MD5Sum,

TSK/Autopsy, Win32dd/Win64dd, MemParser, Volatility, Memdump, Netcat,

NetAnalysis and Cacheback while maintaining the forensic lab which all

tools resided in and refining the existing procedures and policies to

incorporate new technologies and challenges

. Worked with clients from a wide variety of industries to implement

frameworks necessary to their environments including FISMA, COBIT,

ITIL, SO/IEC 27001/27002 and Six Sigma

. Advised clients on developing mature change management, disaster

recovery and problem management policy

POSITIONS HELD

. Senior Forensic Examiner with Honeywell: 2008 - Present

. Senior Risk Management Professional with Honeywell: 2006-2008

. Lead Technology Risk Management Professional with Jefferson Wells:

2004 - 2006

. Security Consultant with Vigilant Minds: 2003 - 2004

. Level 1 Security Analyst: 2002 - 2003

. Intelligence Analyst with the United States Army: 1996 to 2001

EDUCATION, TRAINING & CERTIFICATIONS

. Associates of Computer Science - Pittsburgh Technical Institute,

Pittsburgh, PA

. Certified Information Security Systems Specialist(CISSP)

. Encase Certified Examiner (ENCE)

. Access Data Certified Examiner (ACE)

. GIAC Certified Forensic Analyst (GCFA)

. Microsoft Certified Systems Engineer: Security (MCSE)

. Cisco Certified Network Administrator (CCNA)

. Comptia Security+

. Comptia Networking+

. Comptia Linux+

. Comptia A+

SECURITY CLEARANCE

. Department of Defense Secret

Contact this candidate