
Senior Security Architect at Kforce
Greater Boston Area

Senior Security Architect at Kforce
Greater Boston Area
Information assurance / cybersecurity / information survivability / risk management architect of some twenty years. Significant expertise in multivariate correlation; behavioral and specification based threat detection; data loss prevention (DLP) and insider threat; intrusion and extrusion detection / prevention; APT; penetration testing and web application security; regulatory compliance.
I spent the first half of my career coming up through the ranks from network administrator to IT director. This hands-on experience in the world of IT operations provided an excellent foundation for becoming a security architect with a real-world perspective. I decided to make security my chosen specialization after being trained in the MIT school of information survivability thought while serving as a network engineer there. I acquired extensive experience in risk management and information assurance across a wide variety of industries while serving as a consulting engineer in two successful security product start-ups: Verdasys (DLP) and Q1 Labs (enterprise threat management / SIEM). I drew on this experience while serving as a security / risk management architect at TD Banknorth, NA and at Verizon Business / Raytheon where I served as a senior architect on a highly successful cybersecurity program.
Published at DHS Science & Technology 2005, presented at ACSAC 2005.
Versed in alphabet soup: PCI, SOX, NERC, JSOX, GBLA, HIPPA, ITAR, ISO, NISPOM, NIST, COBIT regulations. Industry experience includes government (state / federal US, Canada, Europe, Israel, Japan), military, defense, banking, financial services, insurance, telecommunications, consulting, software, retail, higher education, manufacturing, automotive, petrochemicals, ISPs, MSSPs, healthcare, pharamaceuticals, biotech.
(Computer & Network Security industry)
2009 — Present (less than a year)
(Privately Held; Computer & Network Security industry)
2006 — 2009 (3 years )
(Public Company; 5001-10,000 employees; BNK; Banking industry)
November 2005 — 2006 (1 year )
(Computer & Network Security industry)
2003 — November 2005 (2 years )
(Privately Held; 51-200 employees; Computer Software industry)
2001 — 2003 (2 years )
(Computer & Network Security industry)
2000 — 2001 (1 year )
(Public Company; Defense & Space industry)
1999 — 2000 (1 year )
Contract member of the Computer Sciences Corporation / General Dynamics Y2K project. Successfully performed as technical lead on WAN sub-project.
(Higher Education industry)
1997 — 1998 (1 year )
(Public Company; Information Technology and Services industry)
1996 — 1997 (1 year )
Contract engineer on the IBM Global Services / Liberty Mutual Windows95 project. Technical lead on laptop sub-project which was driven to a successful conclusion.
(Computer & Network Security industry)
1992 — 1996 (4 years )
MIT Enterprise Forum
MIT IT Partners Program
ISSA
NEISG
SAGE