Associate at Booz Allen Hamilton
Washington D.C. Metro Area
Associate at Booz Allen Hamilton
Washington D.C. Metro Area
Thomas J. Quinlan has more than 25 years of experience with technology, with extensive experience in network and application security, computer forensics, and electronic discovery. He is currently an Associate at Booz Allen Hamilton. Previously, he has held positions at several technology companies, in charge of large scale eDiscovery projects, forensic investigations, and network and application security for some of the internet's largest on-line applications. He is certified in both Computer Security (CISSP) and Computer Forensics (EnCE).
EnCE
CISSP
eDiscovery
(Privately Held; 10,001 or more employees; BAH; Management Consulting industry)
March 2008 — Present (11 months)
(Privately Held; 1-10 employees; Information Technology and Services industry)
May 2001 — Present (7 years 9 months)
(Public Company; 501-1000 employees; GUID; Computer & Network Security industry)
October 2005 — February 2008 (2 years 5 months)
- Project manager for multiple (250+) custodian electronic discovery collections using EnCase eDiscovery Suite and/or Encase Enterprise, spanning multiple locations, on multiple continents.
- Only member of Professional Services Division to be on both the electronic discovery and incident response teams.
- Provided on-site training for GSI software customers in EnCase Enterprise and eDiscovery Suite.
- Provided GSI PSD with significant enterprise IT experience, allowing them to expand offerings in such eDiscovery areas as SQL, email (Exchange Servers, Lotus Domino Servers) and non-Microsoft operating systems (particularly Linux). Email examples included using ExMerge to recover mailboxes to full rebuilds of non-English Exchange servers
- Tested EnCase Software for functionality of server email forensics; worked with developers to provide functionality and bug-free execution of code.
- Supervised Lab Technician and all Interns.
(Public Company; 501-1000 employees; GUID; Computer & Network Security industry)
October 2005 — September 2006 (1 year)
- Promoted to Senior Forensic Consultant in less than a year.
- Consulted and instructed clients in Best Practices and forensically sound data recovery techniques including evidence control and Chain of Custody.
- Conducted computer investigations including evidence handling, acquisition/collection and duplication of digital evidence.
- Recovered digital evidence including deleted files; detected files of interest; searched file slack and file fragments; conducted hash analyses and file signature analyses; wrote reports of findings.
- Provided technical oversight for all office IT and network(s) infrastructure.
(Public Company; 1001-5000 employees; MHP; Information Technology and Services industry)
February 2005 — October 2005 (9 months)
- Reported directly to the Chief Security Officer.
- Participated in CIQ risk assessments.
- Developed and executed a plan to bring 100+ data center machines to current patching levels with no down time for CIQ platform; re-executed quarterly.
- Saved company ~$10,000 a year in costs by deploying Linux-based Postfix email relays.
- Planned and deployed Snort-based IDS, for offices in New York and India.
- Deployed MS WSUS technology to offices in India, for efficient distribution and installation of patches to 1000+ desktops.
- Worked with NTObjectives team members to provide an application security audit for the CIQ web-based platform.
- Provided MIS staff with Linux training.
- Worked with MIS staff to move 100+ servers from Cortlandt Street office to Water Street office, providing minimal downtime for all staff and production operations, while providing seamless security for computers, staff, and platform during the entire process.
(Privately Held; 51-200 employees; Computer & Network Security industry)
May 2004 — January 2005 (9 months)
- Responsible for security of McDonald’s Monopoly online promotion, including network, server, and application levels. Provided security for other online promotions, for such customers as Kraft, HSBC, and BestBuy. Promotions were successfully audited by KPMG.
- Assisted senior management in project planning by providing security information for technologies to be used in projects; created a package of security services for marketability to clients.
- Provided security audits to clients, with reports for improving their security.
- Installed, configured, and deployed enterprise monitoring system with Nagios to allow for redundant monitoring of mission critical systems.
- Created company wide security policies for safeguarding company’s assets, intellectual property, and computer and network systems.
- Oversaw compliance with securities policies and best practices on a daily basis after educating employees on said practices.
(Privately Held; 51-200 employees; Information Technology and Services industry)
April 2003 — May 2004 (1 year 2 months)
- Responsible for daily operations of data center in a mixed platform environment.
- Installed and configured Linux servers (Redhat, Gentoo) for use as website hosting servers, DNS servers, web application servers, database servers, file servers, and standby backup servers.
- Provided clients with custom installations and kernel configurations of Linux.
- Created a custom logging website statistics environment for clients with heavy web traffic, using Sawmill logging software and OpenMosix Linux clustering.
- Installed and configured Linux servers with RTG and MRTG to provide bandwidth monitoring of Cisco switches.
- Responsible for Cisco Pix, Arrowpoint load balancers, and Cisco switches.
- Transitioned legacy Layer 2 network to a fully switched Layer 3 network.
- Installed Solaris on Sun Enterprise servers, complete with A1000 StorEdge devices, for use as Oracle database platforms.
- Provided data recovery skills for company and customers.
(Privately Held; 51-200 employees; Computer & Network Security industry)
2000 — 2001 (1 year)
- Installed and configured servers using Redhat and Windows 2000 for use as file and print servers, DNS servers, website hosting/application servers, and a T1 connected Altigen phone server.
- Responsible for security of server room and network, including creation of and maintenance of an Asset Management Database for $250,000 of hardware and software
- Helped develop and document a disaster recovery plan including backups, multi-homing, and off-site redundancy.
(Partnership; 10,001 or more employees; Accounting industry)
May 1998 — February 2000 (1 year 10 months)
- Streamlined procedures reducing amount of paper needed by 90% through automation of tracking procedures and inventory, including co-creation of an Asset
- Database for $250,000 worth of assets which allowed for accurate usage reports, proper inventory handling, and precise internal billing.
- Oversaw construction and planning of new Service Desk, which provided a central area of computer and parts storage in addition to facilitating easier customer interaction. Met with senior management and determined security of the new service desk; responsible for ensuring proper implementation of such.
Repeated above processes for the second service desk in second office location in New York.
- Ensured service desk staff provided the proper level of technical support to 2000+ employees in both locations.
- Provided point of contact for firm employees using “non-standard” firm images, especially those using Linux.
- Assisted corporate security with computer examinations when necessary.
(Computer & Network Security industry)
1993 — 1998 (5 years)
Bachelor's Of Science, Computer Science, September 1993 — May 1998
September 1989 — June 1993
Mensa, International High IQ Society, NYFFL
Eagle Scout, Boy Scouts Of America