Work
I am currently managing cyber security for P.E.O (Insperity) in North Houston, Texas. and also a contactor with SANS as a question writer and Gold paper advisor. I have been in the information security field for 8 years as of 2011. I obtained a master degree in information security management from STI in 2010 and completed my undergrad from SHSU. I plan to enroll in a PHD program in 2012. I hold several technical certifications from ISC2, GIAC, Microsoft, Checkpoint, HP, CompTIA, and others (see below). My focus in the field is on defending the enclave, implementing security metrics, increasing corporate awareness and putting the SANS 20 critical controls into practice.
Additionally I am an adjunct professor for the Lonestar.edu college system. I teach evening technology classes and greatly enjoy watching students embrace technology that will enhance their professional lives.
Memberships:
-
I2C
-
ISACA
-
InfraGard
Certifications:
-
Certified Information Systems Security Professional (CISSP)
-
GIAC Security Essentials Certification (analyst #4910)
-
GIAC Certified Certified Intrusion Analyst (analyst #8269)
-
GIAC Certified Incident Handler (analyst #2166)
-
GIAC Security Leadership Certification (analyst #1376)
-
GIAC Certified Legal Issues (analyst #48)
-
GIAC Certified Project Manager (analyst #28)
-
GIAC Certified Systems and Network Auditor (analyst #2529)
-
GIAC Certified ISO-27000 Specialist (analyst #688)
-
GIAC Certified Web Application Penetration Tester (analyst #983)
-
Microsoft Certified System Engineer (W2K)
-
Microsoft Certified System Engineer (NT)
-
Nortel Networks Certified Design Engineer (NNCDE)
-
Checkpoint Certified System Administrator (CCSA)
-
RSA EnVision Certified Engineer (NICE)
-
HP Platform Specialist (APS)
-
Netscout Certified Administrator (NCA)
-
CompTIA Certified A+
-
CompTIA Certified N+
-
CompTIA Certified Sec+
-
Numera Footprints Certified Administrator
Compliance:
Working in this field has provided experience in writing controls and auditing Sarbanes Oxley, HIPAA, PCI, SAS70, CMR1701, and several state disclosure laws. I wrote a paper on this here.