Senior Security Architect at Kforce
Greater Boston Area
Senior Security Architect at Kforce
Greater Boston Area
Security architect based in Boston doing work at a variety of organizations around the world. Recently I've been working on projects in regulatory compliance, data breach detection, SIM tuning and customization, event correlation, behavioral threat detection, network vulnerability modeling and attack simulation, immunization against malicious code, phishing countermeasures, insider threat detection and prevention, service hardening, intrusion and extrusion detection / prevention, penetration testing, web application security and mandatory policy enforcement.
Published at DHS Science & Technology 2005, presented at ACSAC 2005. Publications and contact information are available at http://www.craigchamberlain.com
CEH Certified Ethical Hacker
GHTQ GIAC Cutting Edge Hacking Techniques
NSA-IAM National Security Agency INFOSEC Assessment Methodology
SSCP Systems Security Certified Professional (ISC2)
Versed in PCI, SOX, NERC, JSOX, GBLA, HIPPA, ITAR, ISO, NIST, COBIT regulations. Industry experience includes government (state / federal US, Canada, Europe, Israel, Japan), military, defense, banking, financial services, insurance, telecommunications, consulting, software, retail, higher education, manufacturing, automotive, petrochemicals, ISPs, MSSPs, healthcare, pharamaceuticals, biotech.
SIM and intrusion detection tuning expert. Experienced intrusion detection and forensic analyst. Seventeen years professional hands on experience in IT, network and security engineering, security architecture and risk assessment. Ten years experience as a consultant, professional services engineer and project manager. Experienced practice manager. Trained in security tradecraft while working at MIT. Alumnus of several SANS tracks and Bejtlich's elite TCP/IP Weapons School in Washington DC
(Computer & Network Security industry)
2009 — Present (less than a year)
(Privately Held; Computer & Network Security industry)
2006 — 2009 (3 years)
(Public Company; 5001-10,000 employees; BNK; Banking industry)
November 2005 — 2006 (1 year)
(Computer & Network Security industry)
2003 — November 2005 (2 years)
(Privately Held; 51-200 employees; Computer Software industry)
2001 — 2003 (2 years)
(Computer & Network Security industry)
2000 — 2001 (1 year)
(Public Company; Defense & Space industry)
1999 — 2000 (1 year)
Contract member of the Computer Sciences Corporation / General Dynamics Y2K project. Successfully performed as technical lead on WAN sub-project.
(Higher Education industry)
1997 — 1998 (1 year)
(Public Company; Information Technology and Services industry)
1996 — 1997 (1 year)
Contract engineer on the IBM Global Services / Liberty Mutual Windows95 project. Technical lead on laptop sub-project which was driven to a successful conclusion.
(Computer & Network Security industry)
1992 — 1996 (4 years)
MIT Enterprise Forum
MIT IT Partners Program
ISSA
NEISG
SAGE