Starr Brown

Profesional Summary

Executive level security professional focused risk management, cloud engineering, offensive security & web application penetration testing with extensive executive, team and project management experience

Skills

CISSP, Web Application Offensive Security, Penetration Testing, database architecture, Microsoft Dynamics CRM development, Microsoft AX customization, Application testing, Security Analysis, Security Compliance, Risk Analysis & Risk Management, PCI Compliance, Research & Intelligence Analysis, Orchestration, Dev Ops, Sales, Leadership, Executive Management, Marketing, Strategy, Finance Operations, Governance, vCISO, CISO, Nerd to Business translation, Purple team Tools & Languages

AWS, GraphQL, SQL, noSQL, JSON, MongoDB, BeEF, Burp Suite, Metasploit, hashcat, xML, EDI, PHP, Splunk, Microsoft Azure, Docker, Linux, Windows, MacOS, MongoDB, Etilize, Icecat, CNET DataSource, MITRE ATT&CK, Python, Kali, Nessus, SDLC, Virtualbox, QEMU, FedRAMP, StateRAMP, NIST, HITRUST Experience

Executive Director

XR Village, Atlanta, GA June 2023 - current

• Created non-profit startup from an adjunct of other villages at DEF CON 30 to a fully stand-alone venture at DEF CON 31 and DEF CON 32 (summer 2024) bringing XR technology, bug hunts, privacy, biometric security and intersections of tech and art and tech and music to the DEF CON hacker community

• Created & managed outreach programs from the ground up increase awareness and lead research to ultimately educate congress and other related lawmakers for better public policy in the XR space

• Programs include: Hackathons, Bug Bounty events, Speakers, Higher Educational and industry (ICS) specific recruiting events

• Project leader for the Open Worldwide Application Security Project (OWASP) Top 10 in XR

• Direct liaison between DEIA groups to further more inclusive voices within the cyber community

Atlanta, GA 30318

404-***-****

ad3mua@r.postjobfree.com

https://www.linkedin.com/in/starr-brown-8837547/

Consultant

404found LLC, Atlanta, GA September 2022 - current

• Established a team of offensive & defensive security experts as well as actors & non- traditional social engineers for security assessments and physical and network penetration testing

• Public Sector education program creation for running CTF challenges as part of eSports and/or STEM curricula and as part of State contracts

• RFP Technical writing

• eSports in education

• Hack-it-Harder program for graduate students

• Full circle communications consulting between engineering, developers and the business

President, IT Innovation & Contract Engagements

Southern Computer Warehouse (SCW), Marietta, GA 2017 - July 2022

• Managed risk, sales and marketing teams with annual revenue of $100,000,000

• Managed team of internal developers & consultants and engineering staff for internal and customer projects

• Project Manager and Solution Architect for commerce between computer distributors, SCW and our customers via a myriad of commerce solutions & methods

• Punchout / cxML and xML, EDI

• Ariba & Jaggaer (formerly SciQuest)

• CNET ChannelOnline, Magento

• Large data-set management and catalog management MongoDB, Etilize, Icecat, CNET DataSource

• Custom App development within Microsoft suite of ERP solutions; AX (now Business Central), Sharepoint & Dynamics CRM

• Brand management including all written communication including sales scripts, email, web, socials and LiveChat

• Highly customized, socially engineered customer engagement

• Fraud & Phishing education program that changed our negative impact rating from 50% successful to less than 5% company-wide

Chief Operating Officer, 2002-2017

• Implemented and extended suite of Microsoft ERP solutions Microsoft Dynamics CRM and Microsoft AX (now Business Central)

• This implementation was completed as one of the first 3 in the US and largely unsupported by any third party assistance including Microsoft

• Managed team of developers & consultants in addition to acting as project manager and database architect

• Directed and supported software development lifecycle for internal decision-based commerce software (MOP)

• Principal for database architecture and mapping between internal systems, commerce engines, suppliers and storefront

• Commerce between computer distributors, SCW and our customers via a myriad of commerce solutions & methods

• Punchout / cxML and xML, EDI

• Proposal response for national purchasing cooperative agreements, state contracts and/or technical solution selling featuring commerce solutions

• Computer hardware, AV and CCTV / Security contracts won in Texas and Georgia account for more than $30 million in annual revenue

• Internal and external documentation for software, business processes and procedures, e-commerce, and web services

• Created and maintained large collection of job aids across many knowledge-base tools like Sharepoint, KB, and Slack

Director of Finance & Purchasing, 2000-2002

• Project lead for company conversion to Sage MAS90

• Responsible for data integrity across organization including CRM, Procurement and Accounting systems including on-going education about data management and retention

• Created program for automatic software licensing storage, electronic fulfillment and renewals

• Managed all procurement of customer orders, supply chain management and internal purchasing in excess of $25,000,000 annually

Purchasing & Facilities Manager

MindSpring / EarthLink, Atlanta, GA 1997-2000

• Contract management for office supplies, cellular, parking & telecom

• Built & maintained departmental website

• Badge system implementation and program management for on-going employee adoption

• Facilities Management

Education & Certifications

Georgia Institute of Technology

Cyber & Network Security Bootcamp, 98% final grade

• First place in Linux Offensive CTF

ISC2 - Certified Information Systems Security Professional (CISSP, achieved June 2023)

Contact this candidate