Information Security Engineer

Security Operations Manager

About:

Over ** years of experience in IT Security building relationships as a team-oriented leader. Managing a global team of Security Engineers and Architects in an ever-changing environment. I approach every task with the energy and technical experience needed to see it through to completion. I have led major public and private breach responses with proactive and remediation services.

Summary:

Network Security - IDS/IPS, Firewalls, Content Filtering, Network Visibility Fabric

Endpoint/Data Security - AV/EDR, HIDS/HIPS, Disk Encryption, FIM, DLP, Web Security

Application Security - WAF, DAM, DAF, Web Content Filtering, Cloud Security, Fortinet NGFW

Threat Management - SIEM, Vulnerability Management, Cyber Threat Response

ISO 27000 Certification (US, EMEA, and India), PCI (US, EMEA, and India), SOC 3 (US, EMEA, and India)

EXPERIENCE:

HCL/ ORIX., Dallas, Tx (November 2025 – April 2026)

Information Security Architect – US/Asia

Designed enterprise zero-trust architecture protecting over 10,000 users and reducing lateral movement risks.

Led cloud security architecture for AWS and Azure environments supporting multi-region infrastructure.

Implemented identity and access management strategy integrating SSO, MFA, and privileged access management.

Developed security reference architectures aligned with NIST and ISO 27001 frameworks.

Conducted threat modeling and risk assessments for critical applications and infrastructure.

Partnered with DevOps teams to embed DevSecOps security controls into CI/CD pipelines.

Agile Private Enterprise LLC (Startup) March 2025 – November 2025

Infrastructure Architect

Designed and implemented enterprise-wide security architecture aligned with business and regulatory requirements developed threat models and performed risk assessments for critical systems

Collaborated with engineering teams to integrate security into CI/CD pipelines (DevSecOps)

Established security governance and policies across multiple business units

Evaluated and implemented security technologies (SIEM, EDR, IAM solutions)

Accelya., Miami, FL (October 2021– February 2025)

Security Operations Manager – US/EMEA/Asia

Developed cyber roadmap and metrics for board and Vista Private Equity, collaborating

across various information technology and Cloud Security Departments. This roadmap resulted in a layered security approach that allowed us to establish visibility and protection across the full network stack including legacy infrastructure in accordance with NIST CSF guidelines.

Led global customer, product, and enterprise security, compliance, and certifications

Successfully unified security operations teams across several acquired entities and operating regions

Managed the Configuration and deployment of Fortinet NGFW across the organization replacing legacy piece mill solutions. Establishing a singular view into network utilization patterns, protection schemas and ease of management.

Guided management, operations, and customers through an entity’s public breach

Led the SecOps team through Product integrations for SIEM, EMDR, Vulnerability/ Patch Management, Zero Trust, DLP, and Web Security. Creating a global enterprise security program and reducing technical debt. Selecting tools that met the regulatory requirements for the US, India and GDPR in the EMEA regions.

Built a Security Operations Center with a 24x7 MSSP and an Internal Security team.

Created an Incident Response Policy, Plan and procedures in accordance with NIST CSF.

Developed playbooks for ransomware, malware and various other Security threats.

Successfully achieved ISO 27000 certifications in the US, EMEA and India

Managed 3 separate SOC 2 / 3 and PCI compliance audits a year. Collecting evidence, managing remediations and acting as the primary contact for all GRC related inquiries.

Orthofix Medical Inc., Lewisville, Texas (August 2019 – October 2021)

Senior Security Engineer – US/Italy/France/Germany/Brazil/UK

Lead Security Engineer for the Engineering & Operations team.

Responsible for security tool architectural design, implementation, and management.

Collaborated with the network operations team to review network architecture and identifying gaps related to network segmentation resulting in a multi-year improvement project.

Worked with Manage Service Providers to improve alerting, incident response, reporting and management.

Performed a Security assessment of all Security tools (Symantec Bluecoat, Carbon Black, Cylance, and Cisco Firepower IDS/IPS) removing technical debt resulting in cost savings.

Preformed Technical Feasibility and proof of concept study of new security appliances.

Responsible for implementation, deployment and configuration of technologies such as Cisco EA (Firepower Threat Defense (FTD), Umbrella, Secure-Endpoint, Cloudlock, Stealthwatch Enterprise, Identity Services Engine (ISE), Duo, Tetration (TAAS) and SecureX) creating a single pane of glass for Incident response and alert management.

Responsible for Tuning, Pathing and upgrading of all Security appliances.

Created documentation and trained operations teams on Security Tool use and management.

Signet Jewelers Zale Corp Division, Irving, Texas (November 2014 – August 2019)

Security Engineer – US/Canada/UK

A leader of the Security Engineering and Operations team, 1 of 4, responsible for security tool implementation, design and management.

Assist the Governance Risk & Compliance team in maintaining infrastructure compliance, policies, standards, and procedures in accordance with Payment Card Industry (PCI) standards.

Responsible for incident response, reporting and management.

Initiate and respond to Change Management requests. Ensuring incidents are completed in accordance with SLA requirements.

Review and create network security architectural drawings for data center migration to CyrusOne.

Preformed Technical Feasibility and proof of concept study of new security appliances.

Developed Technical Feasibility Assessment (TFA) and High Level Technical Design (HLTD) documentation and presented to Architecture Review Board.

Responsible for implementation, deployment and configuration of technologies such as IDS/IPS,Hids/Hips, PaloAlto Firewall(Panarama) RSA, Splunk, Firemon, Symantec AV/CSP/PGP Encryption, Dell TPAM, FireEye FAAS/HX/PX/NX, Imperva WAF, Incapsula Cloud WAF, Qualys, and Gigamon.

Management and maintenance of the Splunk SIEM solution. Responsible for onboarding valuable logs and creating correlation rules to improve the security incident alerting system/workflow.

Management and Maintenance of PaloAlto Firewalls. Responsible for Firewall rules review and creation. Establish network VLANS and Routing tables.

On-call rotation for SOC incident response workflow. 3rd level escalation point.

Responsible for the FireEye Security Assessment to improve the Cyber Security Program with regards to data protection, advanced threat detection, risk management, network access control, and governance framework.

Humana - Concentra, Addison, Texas (July 2012 – November 2014)

Systems Analyst / Security Analyst

Thompson & Knight, Dallas, Texas (Oct 2011 – July 2012)

End user Support

Compucom, Dallas, Texas (Jan 2010 – Oct 2011)

End User Support

Stryker Communications, Flower Mound, Texas (Feb 2006 – Sep 2009)

End User Support

Certifications, Education and Other

Devry University - Bachelor of Science in Computer Information Systems

US Navy Veteran (1988 – 1998)

A+/ Security +

Imperva WAF Administration

Stealth Watch Administration

Contact this candidate