
Principal Consultant [Information Security] at Laggui.Com
Philippines

Principal Consultant [Information Security] at Laggui.Com
Philippines
Based in the Asia-Pacific region, I help empower Information Systems Groups with my network performance & security, and risk management service products. These include, but are not limited to: e-commerce penetration testing, auditing firewalls and secured networks and their business applications, computer crime forensic analysis, network intrusion detection, diagnosing and solving network performance issues, recovery of destroyed data, and related training services.
I can help in properly designing and implementing network security components. I can work with customers in introducing processes on how to manage Information Technology risks. This will translate in businesses having reliable, efficient, and manageable networks. This is reinforced by my wealth of experience in managing both technical and people problems; and by following a planned career path; and by solidfying my skills through www.sans.org and www.usenix.org formal training; and by interacting with network security professionals worldwide in various and intense www.securityfocus.com forums.
[CISA] Certified Information Security Auditor
[CISSP] Certified Information Systems Security Professional
[ISO27001 LA] ISO 27001 Lead Auditor (only recently passed certification exam)
[CFE] Certified Fraud Examiner, Associate
others: CCSI, CSA
Expert Witness (in Singapore International Arbitration Court; http://www.SIAC.org.sg)
Solaris/Linux & Windows NT/2000 system management, Basic & advanced TCP/IP troubleshooting, Network security (Internet protocol training, policy creation then implementation of network security policies & tools), Advanced Check Point Software product troubleshooting, Intrusion detection network analysis and alarm, Computer crime forensic analysis, Log analysis (for performance monitoring, intrusion detection, normalization of events), FAT/FAT32/NTFS/EXT2FS/EXT3FS/UFS data recovery
(Information Technology and Services industry)
2004 — Present (5 years)
(Privately Held; 1-10 employees; Information Technology and Services industry)
December 2003 — Present (5 years 8 months)
Based in the Asia-Pacific region, I help empower Information Systems Groups with my network performance & security, and risk management service products. These include, but are not limited to: e-commerce penetration testing, auditing firewalls and secured networks and their business applications, computer crime forensic analysis, network intrusion detection, diagnosing and solving network performance issues, recovery of destroyed data, and related training* services.
I can help in properly designing and implementing network security components. I can work with customers in introducing processes on how to manage Information Technology risks. This will translate in businesses having reliable, efficient, and manageable networks.
/* Students take home copies of my custom Linux-bootable CD that contains tools-of-the-trade for that particular class.
*/
(Public Company; 501-1000 employees; CHKP; Information Technology and Services industry)
March 1998 — December 2003 (5 years 10 months)
As a Product Management Engineer based in California (USA), I became part of a special group called the Product Management team that oversaw the development and progress of all Check Point products. I was formally trained by Pragmatic Marketing school (http://www.pragmaticmarketing.com). Specifically, my role was to define, manage the progress, and support all Check Point Next Generation products in the beta production stage. I managed the NG Beta Programs, the purpose of which was to complement our Research & Developments efforts by testing the documentation, usability, performance, stability and inter-operability of CHKP Products, through its (existing or new) customers.
(Public Company; 501-1000 employees; CHKP; Information Technology and Services industry)
March 1998 — December 2003 (5 years 10 months)
As a Consultant (Technical Services, & as CHKP Certified Security Instructor), I represented Technical Services in the Asia-Pacific region for Post-Sales while also handling fee-based engagements worldwide (including, but not limited to: network security design planning and implementation; recovery of network security perimeters; customization of security software; technical assistance in complex firewall issues). I also replicated post-sales issues on local laboratory, for clients as need be. I also provided constant feedback to Technical Services management regarding ideas for process and quality improvement in support, also on product & enhancement requests by customers in the region. I helped coordinate efforts with Dallas Support office and acted as an advocate for the customers and partners in the Asia-Pacific region.
(Public Company; 501-1000 employees; CHKP; Information Technology and Services industry)
March 1998 — December 2003 (5 years 10 months)
I held the title of Senior Technical Consultant (Pre-Sales, Asia-Pacific region). My area of responsibility was to provide lead pre-sales technical support for Check Point Software and Hardware products. Notable responsibilities include:
1. conducting in-depth product & technology-transfer training to distributors and resellers;
2. writing technical papers to help clients;
3. performing configuration and performance testing of Check Point products;
4.assisting the sales/marketing team in making feasible proposals;
5. ensuring that the I.T. resources of the CHKP Singapore office are reliable and secure;
6. being called upon to solve critical and time-sensitive problems at customer sites
7. create and deliver technical presentations and classes so that they are better oriented with the new products. This includes demonstrating the very popular hacking lessons and experiences showing how effective new products are against the latest TCP/IP-based threats and attacks.
(Public Company; 10,001 or more employees; SUNW; Information Technology and Services industry)
September 1996 — February 1998 (1 year 6 months)
As a Senior Systems Engineer (Philippines), my area of responsibility was to provide lead post-sales technical support for network and host security concerns, with emphasis on Unix/Solaris systems. I also provided technical support in the planning and installation of network management platforms. I created drafts of local computer security policies, and could be tasked to help our clients write and implement their own.
In providing pre-sales technical support, I validated proposed system configurations; demonstrated proposed systems implementability; benchmarked proposed systems performance; then delivered and installed contracted systems within specified time, cost, and quality constraints. This often included working outside normal working hours but was able to push and maintain the lead of Check Point Firewall-1 in the whole Philippine market.
(Privately Held; 501-1000 employees; Information Technology and Services industry)
March 1995 — July 1996 (1 year 5 months)
Provided the most cost-effective and comprehensive solutions for government & diplomatic agencies in need of computer support products and services. Projects included installation and management of:
1. EIA/TIA-568 structured cabling and connecting hardware (Cat.5 UTP, Coaxial, & Fiber optics)
2. Fault-tolerant UPS equipment (250 VA to 1500 kVA)
3. Active and passsive network electronics (NICs->hubs->routers)
4. Raised flooring system products
5. Precision-type airconditioning units (10TR to 100TR)
6. Computer room preparation (integration of all the above)
(Privately Held; 11-50 employees; Information Technology and Services industry)
April 1993 — September 1993 (6 months)
Responsible for delivering up-to-date and relevant news about the local Information Technology industry. Served the interests of dynamic and growing society of I.T. professionals. Left to continue my college education.
Ateneo Information Technology Institute, Certificate Of Appreciation;
Philippine National Police (Criminal Investigation & Detection Group, Computer Crime Unit), Certificate Of Appreciation;
Consultant, National Bureau of Investigation (Anti-Fraud and Computer Crimes Division);
PH DoJ, Cebu Provincial Prosecutor, Certificate Of Appreciation;
Speaker, US Embassy of the PH, Overseas Security Advisory Council;
Speaker, Information Security Systems Society of the Philippines;
Lecturer (One of the top-rated instructors), ISACA Philippines;
Lecturer, IBM (ID, PH, TH, and SG) on ITSM and ISMS compliance;
Special Guest Lecturer, De La Salle University, Graduate School of Business, IT Security Module;
Paul Harris Fellow, Rotary International;
Overall Champion (2007 & 2008, Production Division), Arceemak Gun Club;