Résumé of J.M. Weeks
Certifications
- Certified Information Systems Security Professional (CISSP)
- GIAC Exploit Researcher and Advanced Penetration Tester (GXPN)
- Offensive Security Certified Professional (OSCP)
- GIAC Penetration Tester (GPEN)
- Cisco Certified Network Associate (CCNA) – Security / Routing & Switching
- CompTIA Advanced Security Practitioner (CASP)
- CompTIA A +, Network +, Security +, Linux +, Project+
Experience
Managed Service Provider (MSP)
November 2020 to Present
Vice President, Cybersecurity & Compliance
- Lorem ipsum dolor sit amet
- Lorem ipsum dolor sit amet
Penetration Tester & Exploit Researcher (Contractor)
September 2020 to Present
Vice President, Cybersecurity & Compliance
- Lorem ipsum dolor sit amet
- Lorem ipsum dolor sit amet
Managed Service Provider (MSP)
December 2015 to August 2020
Manager of Cyber Security
- Exercises responsibility for budgets, P&L, and employee performance management; trainsemployees to strengthen competencies in all core job functions
- Provide day-to-day leadership, and management of the Information Security division,managing, mentoring, motivating and growing into mature and goal-driven teams. The information Security division is responsible for services to include: vCISO, 24x7 SecurityOperations Center, Incident Response, Penetration Testing, and Security Assessments
- Serves as the final technical escalation point for vCISOs, SOC Analysts, IncidentResponders, Penetration Testers, and Assessment Teams
- Increased Gross Profit over 10% and Net Operating Income over 15%
- Build and develop strategic partnerships related to Information Security and Cyber Securityservice offerings
- Collaborate with marketing management to align service positioning with market changesand enabling initiatives through knowledge sharing and participation
- Enable sales and solutions architect divisions through training, collaboration anddevelopment of sales/solution tools (scoping workbooks, PA language, pricing calculators)
Senior Cybersecurity Engineer
- Served as the senior technical resource and escalation point of the Information Security team
- Provide hands-on technical delivery and escalation for the Security Operations Center,vCISO, and Penetration Testing teams
- Develop and Implement enterprise-wide cybersecurity strategies across a customer baseconsisting of diverse verticals including education, defense, healthcare, finance, andenergy.
- Manage customer information security programs and ensure alignment with business needsacross a diverse set of benchmarks and standards including NIST 800-171, NIST 800-53,CMMC, NIST CSF, HIPAA, PCI/DSS, and CIS.
- Design, Develop & Deploy Information Security Training Programs.
- Developed new service packages which doubled revenue over a one-year period
- Perform security event analysis, intrusion detection, response, and remediation.
- Develop reports, alert criteria, dashboards, and other items to support the ongoing monitoring,management, and maintenance of SIEM platforms and monitoring infrastructure.
- Collaborated with management on go-to market strategies for new service plan offerings
- Reduced MTTD and MTTR over 80% through process changes and collaboration withmanagement
- Awarded “Excellence in Service Award” at annual company Gala
Linux Project Engineer
- Support the Project Services team in execution of technical projects across a range ofenterprise technologies
- Consult with customers on need and Architect business solutions using best in breedtechnology
- Manage and oversee resources on projects to ensure timely execution and reduce projectrisk
- Gathered requirements, planned, developed, and deployed custom software using Pythonand Public APIs to track terrorist activity on social media platforms for news reporting andescalation to government agencies
Linux & Windows Network Consultant
- Support and consulting for 1000+ customers nation-wide across a large variety of industry verticals
- Consult with customers on need and Architect business solutions using best in breed technology
- Technical escalation point for difficult, high priority, or lingering technical issues needingfinal resolution across a wide-variety of enterprise server and networking technologies
HVAC Supply Company
System Administrator
August 2014 to December 2015
- IT operations management of a wholesale HVAC supply company IT operations with 10locations and 100 employees
- Automated and streamlined system rebuilds and new desktop deployments through imagingand configuration management decreasing time to deploy and maintain by over 60%
- Evaluation, Planning, Acquisition and deployment of IT solutions throughout the company
- Collaborated with management and performed implementation of first IT asset management program. Resulted in equipment reduction, ownership cost reduction, and standardization of systems across company.
Managed Service Provider (MSP)
IT Consultant & Senior Technician
September 2013 to August 2014
- Served as a Senior Technican at a Managed Service Provider (MSP). Provided Support,consulting, and solution design for 200+ customers in the New York Metropolitan Area across a large variety of verticals
- Documented and streamlined installation and configuration of company developed ERPsolution which reduced time to deploy by 45%
- Collaborated with sales leadership by developing new services based upon market demandto add to company portfolio
- Handled escalations for internal and external customers, and assisted Web Developmentand ERP teams with product development and implementation.
- Worked with a number of cloud technologies, virtualization technology, and a variety ofprogramming languages
Fuel Company
Systems Administrator
November 2011 to August 2013
- Served as a System Administrator and Web Developer in a mixed Linux and Windows environment.
- Designed and developed company website and online ordering system using a LAMP stackand front-end web technologies such as CSS, Javascript, and HTML
- Evaluated, Implemented, & Deployed GPS tracking systems for a fleet of oil delivery andservice vehicles
- Development of business process and procedure documentation
- Migrated existing bare-metal infrastructure to virtual machines on an ESXi platform
- Evaluated, Implemented,& Deployed company CRM system for new business unit
- Social media management, SEO, Digital Marketing, & Lead Generation
Education
Western Governors University
- Bachelor of Science, Information Technology - Security
SANS Institute
- Network Penetration Testing and Ethical Hacking(SEC 560)
- Advanced Penetration Testing, Exploit Writing, and Ethical Hacking(SEC 660)
- SANS Training Program for CISSP Certification (MGT 414)
Offensive Security
- Penetration Testing with Kali Linux (PWK)
Projects
Please see My Personal Projects