SUMMARY
Senior level security professional with *0+ years experience in computer security. Experienced in evaluations and certifying hardware and software products to national and international government standards. Delivered detailed System Analysis, Assessments, Project Plans and Solutions for compliance to standards. Strong experience with: Project Management, Software Design and Development, Incident Response, Cross Domain Relationships, Proposals and Presentations and Information Security Strategy.
SKILLS
Programming and design
Strong analytical skills
Information security
Self starter
Project management
Excellent problem solver
Linux
Multitasking
Contract negotiations
Team builder
Strong written and oral communication skills
PROFESSIONAL HISTORY
Senior Security Consultant
11/2004 – 9/2017 - atsec information security corporation, Austin, TX
Accelerated expansion of Common Criteria evaluations and FIPS 140-2 certifications into the IBM and z/OS multi-million dollar product arena.
Increased company revenue by expanding integrity audits and penetration testing to new platforms.
Participated in evaluations of Red Hat Enterprise Linux, DB2 for z/OS, DB2 for Unix Windows and Linux, z/OS, z/VM, Qualcomm Snapdragon chips, etc. verifying all aspects of the systems against the Common Criteria at Evaluation Assurance Level (EAL) 4.
Guided teams of evaluators and consultants as project leader and lead evaluator to achieve on-schedule and ahead of schedule performance for Common Criteria and FIPS 140-2 evaluations.
Analyzed Linux kernel, System SSL for z/OS, Integrated Cryptographic Service Facility (ICSF) software and Qualcomm Snapdragon hardware for security and cryptographic functionality. Generated test plans to verify security met FIPS 140-2 criteria.
Performed code reviews of OpenSSL, libgcrypt, NSS, OpenSSH and strongSwan Linux applications to ensure integrity and security.
Member of red team performing penetration testing of electronic voting systems.
Performed reviews of system components and procedures to ensure high security, integrity and availability.
Manager Security Software Design and Development
10/1991 – 5/2004 – Vanguard Integrity Professionals, Las Vegas, NV
Tripled the customer base and increased revenue over 400%.
Transformed ad-hoc one person development effort into a professional ten person development team.
Established an incident response team providing 24 by 7 support.
Maximized product sales by architecting product line from background only to include foreground capabilities.
Expanded the product line from a single product to a security management suite of three related products.
Taught mainframe security classes under contract with IBM to security professionals for multiple years.
Presented security topics to large audiences at the Vanguard Security and Compliance Conference for 13 years.
Advisory Programmer
5/1982 – 3/1991 International Business Machines, Kingston, NY
Senior Technical Lead across multiple IBM development laboratories coordinating design and development to achieve NIST B1 certification for IBM MVS/ESA systems.
Led department in the design and develop of IAM software, coordinating the team effort, reviewing designs and code, resolving technical issues and ensuring on-time delivery.
Handled incidents on a world wide basis for IAM products.
Designed and developed storage management, auxiliary storage and service software for System 38 and AS400 systems.
MILITARY SERVICE
United States Air Force – Honorable Discharge
EDUCATION
1982 – Northern Michigan University, Marquette, MI
B.S. Mathematics/Computer Science
Minor – Digital Electronics
AWARDS
Air Force Commendation medal
IBM Outstanding Achievement Award