Senior Security Researcher - Tenable Network Security
Greater Atlanta Area
Senior Security Researcher - Tenable Network Security
Greater Atlanta Area
I am a network security professional. I am an expert at creating tools which test networks or applications. I am intimately familiar with most of the major security applications (both closed and open source). I am an expert at black-box penetration testing and network protocol analysis. I am an expert at finding security flaws in all types of systems. I am well versed in Security Policies and Guidelines and have more than 10 years of experience working with Federal Government, State & local government, Fortune 500, and security vendors.
Network defense, Security Policy, Security infrastructure planning and implementation, merger and acquisition planning and Risk analysis, audit, testing of new security products, development of new security products, management of security professionals, incident response, policy enforcement and compliance.
(Privately Held; 11-50 employees; Computer & Network Security industry)
September 2003 — Present (5 years 11 months)
Primarily worked in Research and Development on the Tenable passive vulnerability scanner (NeVO/PVS), active vulnerability scanner (Nessus), IDS correlation in the Security Center product, and Log analysis in the Thunder product.
(Educational Institution; 501-1000 employees; Computer & Network Security industry)
May 2003 — May 2004 (1 year 1 month)
Having worked with Professor Mattord at Georgia-Pacific, I was asked to help develop a curriculum for KSU information security students. I did this on a part-time basis for close to a year. The position included teaching classes on ethical pen-testing, war-dialing, and other security-related topics. I also worked with KSU on setting up a vulnerability scanning solution and passive vulnerability scanner for their enterprise.
(Public Company; 10,001 or more employees; GP; Computer & Network Security industry)
December 1999 — September 2003 (3 years 10 months)
As a technical lead, I was responsible for managing both personnel and projects. I was responsible for penetration testing, new product evaluation, Intrusion Detection Systems, Firewall audits, Source code analysis, Incident response, Forensic investigations, wireless audits, and much more for a (at the time) Fortune 75 company.
As a member of a group which reported to Corporate Security, I completed physical security site audits at G-P mills in North and South America.
(Privately Held; 11-50 employees; Computer & Network Security industry)
October 1998 — December 1999 (1 year 3 months)
Y2k analysis and remediation for the University of Georgia, Network Security Officer for Atlanta office, DoD work with the Morris Brown Research Institute, Network design, Unix training, and document management.
(Privately Held; 51-200 employees; Computer & Network Security industry)
June 1997 — October 1998 (1 year 5 months)
Network design for Greystone power, Gwinnett County School System, and Dekalb County School system. Designed NetCom Atlanta office. Primary security officer for NetCom corporate offices in Denver, Atlanta, Oklahoma City, and Herndon Virginia. VPN, firewall, and Intrusion Detection design, rollout, and maintenance. Worked on various Federal contracts.
BS , Mathematics , September 1990 — September 1995
Anything unique and non-trivial in the area of Information Security, sports, Literature, etc.
Mathematical Association of America (MAA)
Most Valued Speaker - I-4 Net Focus North America security conference
Marine Corps Security Forces
'Terrorism Counteraction For Marines' training