Timothy R Sanderson II

*** * ***** ** #****, Rexburg ID 83440

adpkd7@r.postjobfree.com (Mobile) +1-307-***-****

LinkedIn www.linkedin.com/in/timothysanderson/

Bus Driver / Ethical Hacker / Penetration Tester

Information Technology Security Specialist

Analyst

Top Secret Clearance based on in-scope Tier 5 Investigation (Expired 03/05/2021)

Solutions-oriented Analyst, and IT Security, Infrastructure Specialist with success directing a broad range of corporate IT initiatives while participating in planning and implementation of information-security and network architecture solutions in direct support of business objectives.

Demonstrated capacity to implement innovative programs that drive awareness, decrease exposure, and strengthen organizations.

Hands-on experience leading system development efforts, including requirements definition, design, architecture, testing, and support.

Outstanding leadership abilities; able to coordinate and direct all phases of project-based efforts while managing, motivating, and leading project teams.

Adept at developing effective policies and procedures, project documentation and milestones, and technical/business specifications.

Significant experience in data network design, implementation, and management.

Core Competencies. Ethical Hacking, Penetration Testing. Routing, Switching, and Windows Servers; Wide Area Networks; Telecommunications and Network Security; Encryption; Access Control Systems and methodology; Applications and Systems Development Security; Business Continuity Planning and Disaster Recovery Planning; Operations Security; Physical Security; Security Architecture and Models; Security Management Practices.

* Platforms. Microsoft operating systems from DOS 5.0 to Windows Server 2012; Cisco routers: series 2500, 2600, 1800, 2800, 3800, 3900, 7200, 1000, 1000X; Cisco switches: series 2900, 3500, 3700, 3800, 6500 including VSS configurations, 6800, Nexus 5000/5500 including virtual port channel configurations and 2000/2200 fabric extenders; Cisco firewalls: series Pix, all models and ASA from 5505 to 5585X single and clustered including integrated modules such as content filtering and IPS; ADTRAN TA5000 and Optimx-6100; Citrix NetScaler load balancer; Infoblox multifunction appliance: IPAM, DHCP, DNS, NTP, FTP, etc.

* Networking. TCP/IP, Novell, IPX/SPX, Ethernet, Spanning Tree, BGP, VPN, SSH, PGP, PKI, RIP, EIGRP, OSPF, PPP, HDLC, T1/DS1, T3/DS3, SONET, Frame Relay, ISDN, switching, routing, wireless both small and enterprise, IDS/IPS.

* Languages. Some Visual Basic, HTML, Batch files.

* Tools. Kali Linux, Burp Suite Pro, Nessus, Nmap, Wireshark, SolarWinds NPM/NCM/NTA, Cisco Prime Infrastructure, Nagios, Cacti, Smokeping, Twiki, Syslog, Kiwi CatTools, Snort, Cisco IOS Firewall, Cisco PIX/ASA Firewall, Microsoft Office, Office 365, BartPE, stand-alone VMware servers, OpenSSH for Windows.

Professional Experience

Madison County School District 321 Transportation 08/03/2021 – Present

29 N 1st East, Rexburg, ID 83440

Verifier: Mary Ann Nielson, 208-***-****

Bus Driver

Key Contributions:

Pre and post trip inspections

Driving a bus with established routes

Additional assigned work when applicable including sweeping/cleaning buses, fueling, equipment inspections, etc.

Prescient Security 03/02/2020 – 02/28/2021

1211 Main Street, Suite 2, Salmon, ID 83467

Verifier: Steve Seideman, 208-***-****

Security Consultant / Ethical Hacker / Pen Tester

Key Contributions:

Perform web application penetration tests, and mobile application penetration tests

Analyze security test results, draw conclusions from results, and develop targeted testing

Communicate technical vulnerabilities and remediation steps to developers and management

Provide technical consultation on Security Tools and Technical Controls

Wright State Applied Research corporation 09/02/2016 – 01/31/2019

4035 Colonel Glenn Highway, Beavercreek, OH 45431

Verifier: David Selby, 937-***-****

Consultant

Key Contributions:

Assist in generation and reproduction of classified materials

Research and presentation of various intelligence related topics

Review and provide feedback of classified course content

Participate in Analyst Test Bed Program research/experiments

Other duties as assigned

Analyst Training - a rigorous 10-week program providing tools to be a successful analyst in the Intelligence Community (IC) or Law Enforcement. 400 hours of instructional time from subject matter experts including ~ 201 hours of Learning Theory in Core Foundation Analytic Skills and ~199 lab hours of supervised instruction in individual, small group, and team exercises to reinforce learning, including practice on analytic software tools. Topics included:

oOperational Security (OPSEC)

oMulti-INT Analysis

oLegal and Ethical Issues in Intelligence

oIntroduction to Terrorism

oIntroduction to Counterintelligence

oChemical and Biological Weapons

oHuman Systems Integration

oIntroduction to Aircraft Analysis

oIntegrated Air Defense Systems (IADS)

oTransnational Organized Crime

oIntroduction to Network Analysis with Lumify

oOpen Source Intelligence (OSINT) Analysis

oIntroduction to Space & Missiles Analysis

oHow to Brief Like an Analyst

oHuman Intelligence (HUMINT) Analysis

oSignals Intelligence (SIGINT) Analysis

oIntroduction to ArcGIS

oGeospatial Intelligence (GEOINT) Analysis or Imagery Intelligence Analysis

oMeasurement and Signature Intelligence (MASINT) Analysis

Luxottica Retail, Cincinnati OH 05/29/2014 – 06/03/2016

Multinational Eyewear frame, and lens manufacturer and retailer. Owners of lenscrafters, pearle vision, oakley, sears optical, target optical, sun glass hut, wholesale, Online, etc.

1000’s employees, 1000's of customers

Senior Network Administrator at Luxottica Retail, Mason OH

Key Contributions:

Contractor for the first six months through Pomeroy, 05/29/2014 – 11/16/2014.

Physical design, installation and upgrading of all data network routers, switches, firewalls, wireless LAN controllers, wireless access points, and load balancers at HQ and remote sites on our multinational MPLS network.

Configured, installed, and maintained network equipment, connectivity, and network services across local area networks (LAN), wide area networks (WAN), remote access, and wireless access

Maintained an enterprise cisco wireless network of over 12,000+ access points using Cisco Prime Infrastructure and direct WLC and LWAP access.

Maintained Internet access for all Corporate HQ and North American retail stores including two data centers, and four manufacturing sites.

Maintained Cisco ASA firewalls, standalone and clusters, in multiple sites, using both command line and ASDM access.

Maintained multiple Citrix Netscalar load balancer clusters at different sites, handling all Luxottica mission critical websites and network resources.

Maintained multiple call centers’ network access using both physical and software VoIP phones, including QoS implementation, latency monitoring, and QoS tuning.

Maintained and implemented SIP voice gateways and SIP call legs.

Maintained connectivity between, and all routing and switching within, two separately located data centers.

Assisted application development and support groups in the design of the technical aspects of network and technology implementations.

Maintained network and equipment documentation.

Monitored network status and performance for troubleshooting and capacity planning purposes using SolarWinds and WAN vendor tools.

Ensured quality within Technical Services through compliance to industry standards and methods.

Assisted in planning and participating in the corporate technical network architecture direction, including all components from the desktop, network, server, database, and mainframe systems.

Acted as a technical consultant to Information Systems groups, business departments, and independent business units.

Time off and career campaign 09/28/2013 – 05/28/2014

Took time off to convalesce from a short-term illness. Then resumed my career campaign, finding Luxottica through Pomeroy.

Cincinnati Bell Technology Solutions (CBTS) 07/29/2013 – 09/27/2013

Technology Services and Management; Data Centers and Hosting.

100’s employees, 1000's of customers

Network Engineer

Network Engineer for GE contract account. The team manages over 1500 global sites and 15,000 network devices for GE.

Key Contributions:

Focused on routing, switching, and firewalls, LAN and WAN, for GE’s global sites. Remotely supported GE network infrastructure in the US and offshore.

Worked with GE and CBTS engineers with incident management, problem management, capacity management, service acceptance, event management, performance management, and standards compliance, with a focus on service restoration, sustainability, and proactive service improvement.

Time off and career campaign 12/27/2012 – 07/28/2013

Took time off to spend with my family. Then resumed my career campaign, finding Cincinnati Bell Technology Solutions (CBTS).

DataYard Inc., Dayton, Ohio (Formerly Donet) 10/17/2011 – 12/26/2012

Internet Service Provider, CLEC, & Data Center/Hosting Company

15 employees, 1000's of customers

Senior Network Architect

Management and security of all DataYard routers, switches, and firewalls. Internet connectivity. Datacenter management. Internet service provisioning and installation. Sales engineer. Network architecture designs and recommendations.

Key Contributions:

Lead a team of 3 employees.

Designed and implemented new hosted firewall service.

Designed and implemented new internet service for business customers.

Designed and implemented new core switching upgrade based on Cisco Nexus switches.

Facilitated move of primary data center and office network infrastructure to a new location.

Wright-Patt Credit Union, Dayton, Ohio 06/14/2010 – 10/14/2011

Ohio Credit Union

600 employees, 25+ sites, thousands of customers

Information Security Officer & Business Continuity Manager

Administrator for all department business continuity plans and emergency call lists. Information security officer. Vendor risk management administrator.

Key Contributions:

Manager of processes crossing most functions and all departments.

Executed system wide vulnerability and penetration tests for 25 sites. Recommended security and system changes based on results. Audited physical security and compliance with data retention requirements for all sites. Negotiated security vendor contracts worth over 500,000 dollars.

Measured individual vendor risk and reported to management and bank auditors. Lead monthly security meeting with security committee.

Participated in IT department disaster recovery planning. One Call Now administrator.

Updated and distributed all department business continuity plans and emergency call lists. Planned and executed quarterly disaster recovery tests.

Donet Inc., Dayton, Ohio 09/2007 – 06/2010

Internet Service Provider, CLEC, & Data Center/Hosting Company

15 employees, 1000's of customers

Network Administrator

Management and security of all Donet routers, switches, and firewalls. Internet connectivity. Datacenter management. Internet service provisioning and installation. Sales engineer. Network architecture design and recommendation.

Key Contributions:

Researched and implemented traffic quality and latency solution.

Implemented device backup and centralized management solution.

Designed and implemented centralized device logging solution.

Created training materials for in house and customer use.

Supported customers and resolved trouble tickets; resolved Internet abuse complaints.

Edison State College, Piqua, OH 03/2000 – 12/2007

Faculty, Computer Information Technology

Recruited to teach and manage three degree programs in the Computer Information Technology department-teaching client/server theory, routing, switching, network security, and wireless networking. Managed Cisco Academy Web and FTP servers as well as the MSDN Academic Alliance software download server. Managed materials and equipment in the client/server and routing/switching labs. Researched and evaluated networking solutions including managing our college internet bandwidth needs. Served as member of the Edison Information Technology Advisory Committee and the Upper Valley JVS Business Academy Advisory Committee.

Key Contributions:

Instrumental in developing and implementing virtual computer solution saving the college tens of thousands of dollars annually.

Implemented automatic web site usage statistics system using open source software.

Migrated curricula and computer lab hardware and software to new standards multiple times.

Lead and coordinated course creation including equipment and textbook selection, and purchasing.

Designed and implemented synchronous online virtual classroom learning system.

Emerson Climate Technologies, Sidney, Ohio (Formerly Copeland Corporation) 01/1998 – 03/2000

Multinational manufacturer of air conditioning and refrigeration compressors

Systems Engineer/Programmer

Programmed data entry solutions and applications. Designed and administered database solutions. Developed data acquisition systems. Modified and maintained all computer software and hardware systems within the Laboratory Services Group in the Product Evaluation Lab. Modified and maintained computer systems managing compressor testing systems to ensure proper interaction between electronic control systems and hardware. Diagnosed and repaired corporate wide equipment and connectivity problems associated with compressor testing systems. Modified and maintained data entry software used for tracking compressor tests and locations.

Key Contributions:

Designed and programmed companywide reporting system using Excel and Visual Basic for Applications.

Migrated mission critical application from legacy database and application code to a modern SQL database and updated code in a yearlong project.

Updated server hardware, software, and procedures to improve application availability. Solution decreased downtime and help desk requests, increasing productivity.

Education and Certifications

Master of Science Degree in Network Security, 8/2005; Capitol Technology University – Laurel, Maryland.

Bachelor of Science Degree in Management Information Sciences, 5/2004; Franklin University – Columbus, Ohio.

Associate of Applied Business in Computer Information Technology/Systems Engineering, 12/2000. Edison Community College – Piqua, Ohio.

CISSP (expired) – Certified Information System Security Professional. I was certified for 6 years then let it expire because my employers did not require it. They valued my experience more.

CCNP (expired) – Cisco Certified Network Professional. I was certified for 6 years but let it expire because my employers did not require it. They valued my experience more.

CompTIA Network+, A+, Security+.

MCSE – Microsoft Certified Systems Engineer NT4/2000/2003.

Professional Development

Ohio Information Security Conference, 03/2007. Presenter: Practical Information Security for the Small Office.

Ohio Cisco Academy Conference, 03/2006. Presenter: Computer Security for the Home and Small Office

Volunteer Representative in Florida, 08/1989 to 07/1991. The Church of Jesus Christ of Latter-day Saints. Missionary activities and community service.

Professional Affiliations & Awards

Eagle Scout, Boy Scouts of America, http://www.nesa.org/trail.html

Contact this candidate