Security Manager

Carlo Giovanni Anez

***** ****** ***** *******, ***. 103, Ashburn, VA, 20147

703-***-**** *****.****@*****.***

Summary of Information Systems Manager with 7 years work experience focused on

Qualifications Information Security. Possess an excellent technical background and

demonstrated expertise designing, implementing, and managing security systems.

Desired salary between 95k-100k.

• Professional written and verbal communication skills. Able to explain complex

technical problems to wide range of vendors and coworkers.

• Competent liaison between management, clients, and personnel.

• Exceptional technical knowledge. Proficient at learning quickly.

Professional DETICS S.R.L. (La Paz - Bolivia) January 2010 – Present

Background

Information Security Leader

Main duties:

• Identified security risks, threats and vulnerabilities of networks,

systems, applications and new technology initiatives in customer’s networks

using MBSA, Nessus, Eeye and other open/commercial scanning

technologies.

• Provided complex engineering analysis, support and configuration for

different security technologies including: Juniper Enterprise firewalls,

IDS/IPS, switches, routers and Windows/Linux Operating Systems.

• Performed complex technical oversight and enforcement of local

security directives, orders, standards, plans and procedures at central server

site.

• Provided analysis using BPMN modeling language for Auraportal

BPM suite.

• Evaluated highly complex security systems according to industry best

practices to safeguard internal information systems and databases using tools

like Ecora Auditor and AppSecInc Dbprotect.

Achievements: Implemented Project Management System, Designed Security

Education Program for customers of all levels including Senior Management,

Establish a Baseline for all network and technology infrastructure.

National Electoral Court (La Paz - Bolivia) October 2009 – December 2009

Database and Security Specialist

Main duties:

• Assisted the definition and implementation of security standards and

procedures on MS Windows environment and Windows SQL Databases.

• Performed routinely analysis to keep the consistency and integrity of

the National Electoral Database and related databases with AppSecInc

DBprotect tool.

• Configured replication of MS Windows SQL Databases between

Departmental Courts and the National Electoral Court.

• Conducted proceedings to help with information security, reported on

activities to Chief Database Officer.

Achievements: Establish a Baseline for the security of all databases and network

infrastructure.

Siscotec S.R.L. (Santa Cruz - Bolivia) _ ____2004-2009

Chief of Managed Security Services

Main duties:

• Identified and discussed requirements for information systems

projects, costs and execution times of the different services offered by the

SOC (Security Operations Center).

• Developed policies, procedures and contingency plans for data

collection, storage, analysis and correlation, coordinated active responses to

security risks and threats for the SOC using RSA Envision technology.

• Managed work teams in the SOC and technical support departments.

• Managed and configured different security technologies at customer s

sites (Juniper Enterprise Firewalls, routers and switches, TrendMicro

AntiSpam-Webfiltering, Windows/Linux Workstations and Servers) to

achieve strategic goals for the Managed Security Services offered.

Achievements: Implemented policies, procedures and contingency plans,

performed ethical hacking internally and also as a service for different customers.

•

Technical Operating Systems: Mac OS X, Windows (2000 server, 2003 server, 2008

skills server, NT, 9x, XP, Vista, Windows 7), Linux (Red Hat (took RHCE preparation

course), SUSE, DEBIAN, Fedora, CentOS and other Linux/UNIX variants) .

• Security Tools: eEye Retina, GFI Languard Network Security Scanner, nMap,

Nessus, Solar Winds, Metasploit, Cain and Abel, Netstumbler, Kismet, Wireshark,

Backtrack 3-4 Linux Live CD, MBSA (Microsoft Baseline Security Analyzer),

Snort IDS.

• Applications: Juniper Networking Platforms (IDP/IDS, routers, firewalls,

switches), TrendMicro (AV, Antispam, Webfiltering, Desktop/Server)

technologies, SSH, Telnet, FTP, RSA envision, PGP products for PKI, Infoblox

Identity products, Shavlik Netchk protect, ECORA Auditor professional, Ultrabac

Server Edition, AppSecInc Dbprotect.

• Network Services: DNS, DHCP, SMTP, TCP/IP, NAT/PAT, VLANS, Active

Directory.

• Languages: Java, JSP, JDBC, XML, HTML, C, C++, Perl, Python, VB, .NET,

ASAP.Net, PHP.

• Databases: Oracle 10g/9, MS-SQL, MySQL, PostgreSQL, Access, Tool for

Application Developer (TOAD), SQL Navigator/Developer.

• Methodologies: RAD (Rapid application development), agile, Business and Data

Modeling, ISO 27001 ISMS.

• Other: Microsoft Office 2007, Microsoft Visio, Microsoft Project, Safari, Internet

Explorer, Chrome.

Exams and JNCIA-FWV (Associate, FWV) – Juniper Firewalls

Certifications

JNCIA-M (Associate, M/T-series) – Juniper Core Routers

JNCIS-M (Specialist, M/T-series) – Juniper Core Routers

JNCIA-EX (Associate, Enterprise Switching) – Juniper Switches

TCSP - TrendMicro Certified Security Professional – Anti Malware

Technologies.

CERT/CSIRT (Carnegie Mellon) – Official course - Managing Computer

Security Incident Response Teams

Actively pursuing CISSP certification

Languages Fluently speak, read and write in English, Spanish and French. Also able to speak

and read Portuguese.

Education Bolivian Catholic University UCB, (Santa Cruz) Bolivia 1998-2003

Major: Computer Science

Contact this candidate