Current Role
I assist financial services companies to customize and implement Center for Internet Security (CIS) benchmark hardening guides for VMware vSphere ESX, Amazon AWS, Google GCP, and Microsoft Azure. Integration of tools like: ServiceNow, Qualys, Splunk, Palo Alto Networks, Prisma (Redlock), Terraform, Inspec, Forseti, Cloud Security Command Center, DevSecOps, and Security as code.
Professional Background
Early Career
Started security career maintaining data communication systems used by military reconnaissance overseas with the SR71 and U2.
Industry Experience
Gained extensive experience in the global pharmaceutical and fabless semiconductor industries, developing robust security frameworks.
Technology Leadership
Assisted executive teams from enterprise and government organizations as a cloud solution strategist and security architect at leading companies including AT&T, Brocade, CA, Cisco, eBay, Ericsson, Huawei, Intuit, Juniper, Spirent, and VMware. Trained in Agile, ITIL, SOX, PCI-DSS, ISO27000.
Standards Development
As a volunteer for the Center for Internet Security, I lead and maintain the Benchmark Standards for hardening hypervisors used for virtual workloads.
Open Source Community
Working with the OPNFV community to determine best practices for networking and security when designing automated virtual testing laboratories based on OpenStack. The Virtual Cloud Test Lab is a prototype version of this reference design.
Expertise & Skills
Cloud Security
Deep expertise in securing cloud infrastructures across AWS, Azure, and Google Cloud Platform with focus on CIS benchmark implementation.
Network Security
Comprehensive knowledge of network security architecture, virtualization, and software-defined networking principles.
Security Tools
Proficient with industry-leading security tools including ServiceNow, Qualys, Splunk, Palo Alto Networks, and Prisma.
Compliance & Standards
Extensive experience with compliance frameworks including SOX, PCI-DSS, ISO27000, and ITIL methodologies.
DevSecOps
Implementation of security as code, infrastructure as code, and integration of security practices into DevOps workflows.
Testing & Validation
Design and implementation of automated testing laboratories and validation of network security solutions.
Get In Touch
Interested in discussing cloud security, network architecture, or cybersecurity best practices? Let's connect.