Senior Information Security Engineer, Risk Management
Oracle
Keywords
Computer Security
Penetration Testing
Linux
Security Information and Event Management
Firewalls (Computer Science)
Vulnerability Analysis
Software Applications
Bluetooth
Microsoft Commerce Servers
Data Centers
Skills
ADP, beta testing, Bluetooth, Burpsuite, Cisco, information security, security architecture, security operations, Data-center, Data transmission, Deep Packet Inspection, Disaster Recovery, firewalls, firewall, Data Loss Prevention, IT projects, IT network, IDS, Intrusion Detection, Juniper, Linux/UNIX, Linux, Commerce Server, Exchange Server, Windows 2000, Nessus, Network administration, network connectivity, network diagrams, network forensics, routers, servers, nmap, Oracle, Qualys, SIEM, Security Information and Event Management, server administration, Service Design, software applications, software development, Penetration Testing, application penetration testing, syslog, SSL, Unstructured Data, VPN, vulnerability assessment, vulnerability assessments
Project history
04/2016
-
07/2017
* responsible for the configuration, design, and administration of critical
security tools such as Vulnerability and configuration compliance scanning
tools, packet brokers, IDS/IPS, sandboxing systems, etc
* work with the security operations teams to ensure security devices/tools
are configured properly to monitor, track, and analyze networks/systems for
potential security and compliance violations while also assisting in all such
potential incidents
* creating runbooks for tools and processes handled by the team (design
documentation, engineering packages, operating procedures, etc)
* training other team members
security tools such as Vulnerability and configuration compliance scanning
tools, packet brokers, IDS/IPS, sandboxing systems, etc
* work with the security operations teams to ensure security devices/tools
are configured properly to monitor, track, and analyze networks/systems for
potential security and compliance violations while also assisting in all such
potential incidents
* creating runbooks for tools and processes handled by the team (design
documentation, engineering packages, operating procedures, etc)
* training other team members
06/2015
-
02/2016
Senior Information Security Engineer
ADP
Provide security program engineering, security consultation and security
technology implementation for ADP's Global Security Organization (GSO).
This includes global deployment of technologies such as Data Loss Prevention
(DLP), Unstructured Data Protection (UDP), Security Information and Event
Management (SIEM), Deep Packet Inspection (DPI) and Intrusion Detection
(IDS).
technology implementation for ADP's Global Security Organization (GSO).
This includes global deployment of technologies such as Data Loss Prevention
(DLP), Unstructured Data Protection (UDP), Security Information and Event
Management (SIEM), Deep Packet Inspection (DPI) and Intrusion Detection
(IDS).
02/2014
-
05/2015
Senior Security Analyst, Corporate Penetration Testing & Security Assessments
Oracle
* Perform application penetration testing against corporate and customer
software applications and conduct vulnerability assessments on Internetfacing
systems and internal systems, both manual and by using tools like
Nessus, Qualys, nmap, ncat, Burpsuite, Hydra etc
* Document technical issues identified during security assessments and
incidents and write reports
* Follow up on implementation of corrective actions from assessments and
incidents
* Research security threats and attack vectors
* Assist in network forensics and incident response
* Assist other GIS staff on specific projects and incidents as required
* Perform special security, compliance and privacy projects on an ad hoc
basis
software applications and conduct vulnerability assessments on Internetfacing
systems and internal systems, both manual and by using tools like
Nessus, Qualys, nmap, ncat, Burpsuite, Hydra etc
* Document technical issues identified during security assessments and
incidents and write reports
* Follow up on implementation of corrective actions from assessments and
incidents
* Research security threats and attack vectors
* Assist in network forensics and incident response
* Assist other GIS staff on specific projects and incidents as required
* Perform special security, compliance and privacy projects on an ad hoc
basis
05/2013
-
01/2014
Senior Service Design Engineer, Data-center Security
Oracle
* Author Design and Engineering Packages. Includes building network
diagrams, compiling quotes, documenting the current and proposed solutions,
and addressing the security and support models.
* Build proof of concept environments to test new technologies and/or services.
* Run production pilots, coordinating pilot users and managing/maintaining
pilot environment.
* Install, configure, and test new services in a production environment.
* Work with Service Transition and Service Support teams on ensuring new
solutions are properly documented and operational staff is ready (includes
training and documentation).
* Work with vendors on beta testing new releases, as well as escalating bugs
and product deficiencies for existing releases (hardware and software).
Respond to "level 4" escalations from Service Support.
* Communicate complex design and technical solutions to internal lines of
business, as well as external partners and customers.
diagrams, compiling quotes, documenting the current and proposed solutions,
and addressing the security and support models.
* Build proof of concept environments to test new technologies and/or services.
* Run production pilots, coordinating pilot users and managing/maintaining
pilot environment.
* Install, configure, and test new services in a production environment.
* Work with Service Transition and Service Support teams on ensuring new
solutions are properly documented and operational staff is ready (includes
training and documentation).
* Work with vendors on beta testing new releases, as well as escalating bugs
and product deficiencies for existing releases (hardware and software).
Respond to "level 4" escalations from Service Support.
* Communicate complex design and technical solutions to internal lines of
business, as well as external partners and customers.
08/2006
-
04/2013
Senior security operations engineer
Oracle
- - Participate in customer network initialization and troubleshooting calls.
- - Process Cisco, Juniper firewalls and Array SSL network connectivity
requests.
- - Responsible for Cisco , Juniper Netscreen and Array SSL VPN/firewalls
concentrators administration.
- - Managing syslog reporting, customer VPN/firewall provisioning, decom,
troubleshooting
- - Respond to escalation support requests from frontline operations teams.
- - Provide problem investigation, configuration testing and troubleshooting
analysis.
- - Assist with infrastructure (Linux/UNIX and Windows 2000) server
administration.
- - Assist in the development of training materials for Connectivity Service's
products and tools.
- - Participate in internal change control process.
- - Participate in internal projects, both managing and part of the project team
- - Process Cisco, Juniper firewalls and Array SSL network connectivity
requests.
- - Responsible for Cisco , Juniper Netscreen and Array SSL VPN/firewalls
concentrators administration.
- - Managing syslog reporting, customer VPN/firewall provisioning, decom,
troubleshooting
- - Respond to escalation support requests from frontline operations teams.
- - Provide problem investigation, configuration testing and troubleshooting
analysis.
- - Assist with infrastructure (Linux/UNIX and Windows 2000) server
administration.
- - Assist in the development of training materials for Connectivity Service's
products and tools.
- - Participate in internal change control process.
- - Participate in internal projects, both managing and part of the project team
03/2003
-
08/2006
IT Engineer
Alcatel Romania
* Managing internal IT projects
* making the presentatins for customers for new Alcatel projects where IT was
involved
* Maintenance and development of existing IT network: servers (Win
2000/2003 SRV, Linux), workstations (all tipes), routers, switch, etc
* Network administration
* Designing and deployment of pilot IT sollutions
* Security and Disaster Recovery responsible for site IT network
* testing new sollutions before implementation
* making the presentatins for customers for new Alcatel projects where IT was
involved
* Maintenance and development of existing IT network: servers (Win
2000/2003 SRV, Linux), workstations (all tipes), routers, switch, etc
* Network administration
* Designing and deployment of pilot IT sollutions
* Security and Disaster Recovery responsible for site IT network
* testing new sollutions before implementation
05/2002
-
05/2003
IT Technical Support Engineer
Scop computers
* Testing and implementing new products (Commerce Server 2000, Exchange
Server 2000).
* Managing company Windows 2000 based network (200 workstation and
servers)
* Providing technical support for my company staff and clients (security,
disaster recovery, installing applications)
* Testing and implementing security products and solutions
* Compaq servers configuration
* Designing, testing and implementing wireless/ Bluetooth network solutions
Server 2000).
* Managing company Windows 2000 based network (200 workstation and
servers)
* Providing technical support for my company staff and clients (security,
disaster recovery, installing applications)
* Testing and implementing security products and solutions
* Compaq servers configuration
* Designing, testing and implementing wireless/ Bluetooth network solutions
08/2000
-
04/2002
Engineer - Data transmission department
Department of Defence
Certifications
cissp
isc2
2009
Local Availability
Open to travel worldwide
