jessica claire 100 montgomery st 10th floor 555 4321000 resumesampleexamplecom website portfolio profiles professional summary forwardthinking senior manager adept managing teams 7 penetration testers 3 direct reports accomplish challenging objectives imparts clear vision guide cohesive highperforming teams jessica twelve years information security control audit experience number industries including financial institutions insurance healthcare jessicas experience includes reviewing system configuration routerswitchfirewallserver settings etc conducting web mobile application security source code reviews social engineering assessments well performing blackboxwhitebox network penetration testing infrastructure components deployed managed client infrastructure team jessica assisted general control reviews pcidss soc reviews database security audits jessica holds bachelor computer engineering mumbai university jessica certified certified information systems auditor cisa certified ethical hacker ceh eccouncil certified security analyst ecsa provisional iso 27001 lead auditor iso 27001 la certified information systems security professional cissp jessica regularly attends issa isc2 isaca chapter meetings participates infosec discussions identify challenges faced security industry skills external penetration testing performing technical security testing clients external internet perimeter security simulate real world cyber attacks outside organization internal penetration testing performing technical security testing clients internal networks simulate real world cyber attacks known insiders compromised systems web application penetration testing performing sophisticated web application security testing targets client websites stores processes transmits sensitive pii information healthcare data credit card information customer accounts credentials websites core client applications running business generate revenue mobile device mobile application security performing security testing mobile applications devices custom developed plante morans clients apps developed android ios application source code reviews reviewing source code security vulnerbailities within clients custom built application data leakage prevention dlp technical auditing conducting simulated test review clients data leak prevention controls place social engineering assessments social engineering involves exploiting human emotions trust factor extract sensitive information art deception may include phishing campaigns phone solicitation physical impersonation projects management approved assist client devloping improving security awareness training programs work history senior manager penetration testing 042009 current verizon warren nj network device configuration reviews performing configuration review network devices routers switches firewalls access points siem security devices wireless penetration testing conduct review wireless settings encryption security devices identify gaps recommend best practices cloud security assessments performing configuration review cloud environemnts aws azure microsoft 365 internal lab network monitoring patch management maintaining monitoring patching upgrading plante moran cybersecurity lab consisting servers workstations network devices gpu based password cracking rigs penetration testing hardware dropboxes remote penetration testing rfid cloner rubber ducky bash bunny bad usb wifi pineapple etc iot device security research testing research security testing iot components include medical devices automotive ecus temperature control sensors several smart devices cyberrange simulation training conduct oversee planned red team offense blue team defense training plante moran clients improve cyber defense skills strategies incident response developed implemented cybersecurity marketing plans drive sales profit brand objectives supervised managed clientrelated communication achieve messaging accuracy service correctness managed largescale projects initiatives including introducing new systems tools processes support attainment challenging objectives managed team 7 practice development management 500000 revenue oversaw client related projects led teams focused penetration testing vulnerability assessment accomplish quality report deliverables surpassing established goals supervised directed consultants senior consultants managers technical teams keep projects ontrack tasks prioritized developed proposals based client requirements rfps assisted building 3 password cracking rigs consisting 6 gpu cards regularly performed hands advance penetration testing vulnerability assessments security consultants system auditors 032008 042009 paramount equity mortgage dallas tx review assess adequacy information security provisions infrastructure components deployed client lanwan architecture switching routing components perimeter security components support systems messaging systems managed client infrastructure team identify information systems control weakness propose suitable remedy application appropriate technology componentcompensating controls continuously update controls new developments information security space ensure adequate upgrades planned executed roles responsibilities following intrusion detection incident handling managing firewall vpnidsips infrastructure security event correlation auditing log monitoring critical information assets like servers event log firewall log physical access card reader information security auditing testing organizations disaster recovery plans information systems providing direct information security training employees contractors alliances third parties establish maintain best practice operating policies write maintain documentation procedures processes working knowledge information security principles techniques technologies hand experience vulnerability assessment tools like mbsa nessus webinspect qualys knowledge lan microsoft windows network technology experience configuration management firewalls extensive knowledge hacking tools experience security hardening practices operating system expertise application security testing ie cross site scripting sql injection buffer overflow corporate trainer 102006 022008 karrox technologies city state providing training high end technologies like ccna ccnp ccsp linux l1 corporate companies trained professionals various skills technology following ip addressing ipv6 routing routing protocols switching wireless mpls ethical hacking linux configuring various cisco routers switch series troubleshoot clients network infrastructure basic configured managed windows 2003 domain controllers centralized user account management dnswinsdhcp server setup handling queries problem related lan connectivity troubleshooting analyzing lan problems installation administration configuring windows 98 windows 2k server professional installations implementation virtual machine implementing proper virus protection security secure lan systems education bachelor computer engineering computer engineering 042006 university mumbai mumbai diploma computer engineering computer engineering 062003 maharashtra state board technical education mumbai affiliations member national sports club india nsci member information systems audit control association isaca chicago chapter member isc2 chicago chapter certifications provisional iso 27001 lead auditor iso 270001 la dec 2014 certified information systems auditor cisa feb 2014 certified information systems security professional cissp 2018 cisco certified network associate security ccna security june 2013 expired certified fire safety emergency preparedness feb 2013 eccouncil certified security analyst ecsa mar 2010 certified ethical hacker ceh aug 2008 farhad daudani best report award internal audit information technology 2008 cisco certified security professional ccsp cleared snd snrs snaf expired languages english negotiated gujarati negotiated french negotiated hindi negotiated marathi negotiated