Profiles search
Andrew Wine
Information Security Engineer
Belle View, VA, United States
Details
Education:
Bachelor of Science (B.S.)
Information Technology
Strayer College
1993 : 1995
Associate of Arts and Sciences (A.A.S.)
Computer Information Systems : Programming Specialists
Northern VA Community College
1990 : 1993
Associate of Arts and Sciences (A.A.S.)
Computer Information Systems : Systems Analysts
Northern VA Community College
1990 : 1993
M.L.S., Interdisciplinary Technology
Concentration in Information Security
Eastern Michigan University
1996 :
HP ARCsight Univeristy
Information Technology
Strayer College
1993 : 1995
Associate of Arts and Sciences (A.A.S.)
Computer Information Systems : Programming Specialists
Northern VA Community College
1990 : 1993
Associate of Arts and Sciences (A.A.S.)
Computer Information Systems : Systems Analysts
Northern VA Community College
1990 : 1993
M.L.S., Interdisciplinary Technology
Concentration in Information Security
Eastern Michigan University
1996 :
HP ARCsight Univeristy
Experience:
IPS - IBM SiteProtector, HP TippingPoint, AirTight WIPS. ARCsight Express CORR and Oracle database, ARCsight Logger, ARCsight Connectors, QualysGuard and RAPID7 network vulnerability scanner. RSA NetWitness/Security Analytics Malware sandbox and packet Decoder and Concentrator. IBM Guardium for Oracle database monitoring and security assesments of PeopleSoft environments. FireEYE CMS, WebMPS and eMPS. FireMon for network device configuration management.EnCase forensics. Symantec Enterprise Endpoint security. Bit9 endpoint parity protection.
2012 : Present
National Academy of Sciences
Information Security Engineer
Information technology support services in a Windows environment. Providing IT desktop support, networking, server, PCI (Payment Credit Industry) DSS (data security standards), and business development support. Microsoft server and workstation environment with Symantec endpoint protection later migrated to Kaspersky. Vulnerability management as related to all system electronic devices. Auditing and penetration testing as needed for PCIDSS compliance.
2002 : 2012
DRA (Delta Research Associates)
Independent Contractor
Computer network security analyst using IDS (Intrusion Detection Systems), IPS (Intrusion Prevention Systems) both signature and behavior based systems. Main activities included detection and containment of network threats at a 24x365 government center. Other responsibilities included IAVA (information Assurance Vulnerability Alerts) documenting and vulnerability management and tracking as related to networks; network “GIG” intelligence gathering; foot printing network behavior patterns, signature management and tuning; testing and verifying various POC’s (proof-of-concept); and sensor management, tuning, and building. Also created, monitored, and maintained honeynets.
Primary application software tools used were ARCsight, Dragon, Lancope, Intrushield, Niksun NetDetector, Niksun Trident, Remedy, TippingPoint, VMware, and WebSense. Open Source software included Argus, Barnyard, Bro, EtherReal, Nagios, NMAP, Snort, and WireShark. Additional software products were tested and thoroughly reviewed including Osiris and Samhain. Software applications were based on Linux (Mandarin, RedHat, SUSE and later OpenSUSE) and Windows platforms. Endpoint protection by McAfee.
2005 : 2010
Telos Corporation
Senior Intrusion Detection Analyst
Enterprise Manager responsible for the administration and management of operational Microsoft Windows servers, Novell NetWare systems, and several variants of Unix. Primary activities are information technology project management, technology support activities and working with the consortium to establish HIPAA AS standards for the medical industry. Secondary activities were department and inter-organizational coordination. Other activities including staffing, training, and implementation. Received special recognition for dividing the Medical Center’s IT infrastructure, including their email system, into four distinct entities while still maintaining cohesion between them despite distinct security requirements.
Primary application software tools used were ColdFusion, GroupWise, Manage Wise, Microsoft Project, Netscape, Remedy, SQL server, ZEN works. Software applications were based on Unix (HP-UX, Linux, Novell Netware, Novell Unix, and Solaris) and Windows platforms. Various X500 directory services used, including Netscape DS, Active DS, and Novell DS. Endpoint protection by Symante
2000 : 2002
George Washington University - George Washington University Medical Center
Director of IT services
Senior network manager responsible for the administration and management of a National Network consisting of Novell NetWare, Windows NT servers, and various Unix systems. Responsible areas included email, web server administration, VTC support, employee staffing and training, vendor relations, facility management, configuration management, router configuration and security, system and network security, system and network performance monitoring and documenting, firewall configuration and management, Network Intrusion detection systems, network administration and management, RAS, and day-to-day information technology operations. Special recognition was received by migrating from one Internet domain name to multiple Internet domains doing an agency re-designation ceremony.
1998 : 2000
MadenTech
Windows NT/Novell Enterprise Manager
2012 : Present
National Academy of Sciences
Information Security Engineer
Information technology support services in a Windows environment. Providing IT desktop support, networking, server, PCI (Payment Credit Industry) DSS (data security standards), and business development support. Microsoft server and workstation environment with Symantec endpoint protection later migrated to Kaspersky. Vulnerability management as related to all system electronic devices. Auditing and penetration testing as needed for PCIDSS compliance.
2002 : 2012
DRA (Delta Research Associates)
Independent Contractor
Computer network security analyst using IDS (Intrusion Detection Systems), IPS (Intrusion Prevention Systems) both signature and behavior based systems. Main activities included detection and containment of network threats at a 24x365 government center. Other responsibilities included IAVA (information Assurance Vulnerability Alerts) documenting and vulnerability management and tracking as related to networks; network “GIG” intelligence gathering; foot printing network behavior patterns, signature management and tuning; testing and verifying various POC’s (proof-of-concept); and sensor management, tuning, and building. Also created, monitored, and maintained honeynets.
Primary application software tools used were ARCsight, Dragon, Lancope, Intrushield, Niksun NetDetector, Niksun Trident, Remedy, TippingPoint, VMware, and WebSense. Open Source software included Argus, Barnyard, Bro, EtherReal, Nagios, NMAP, Snort, and WireShark. Additional software products were tested and thoroughly reviewed including Osiris and Samhain. Software applications were based on Linux (Mandarin, RedHat, SUSE and later OpenSUSE) and Windows platforms. Endpoint protection by McAfee.
2005 : 2010
Telos Corporation
Senior Intrusion Detection Analyst
Enterprise Manager responsible for the administration and management of operational Microsoft Windows servers, Novell NetWare systems, and several variants of Unix. Primary activities are information technology project management, technology support activities and working with the consortium to establish HIPAA AS standards for the medical industry. Secondary activities were department and inter-organizational coordination. Other activities including staffing, training, and implementation. Received special recognition for dividing the Medical Center’s IT infrastructure, including their email system, into four distinct entities while still maintaining cohesion between them despite distinct security requirements.
Primary application software tools used were ColdFusion, GroupWise, Manage Wise, Microsoft Project, Netscape, Remedy, SQL server, ZEN works. Software applications were based on Unix (HP-UX, Linux, Novell Netware, Novell Unix, and Solaris) and Windows platforms. Various X500 directory services used, including Netscape DS, Active DS, and Novell DS. Endpoint protection by Symante
2000 : 2002
George Washington University - George Washington University Medical Center
Director of IT services
Senior network manager responsible for the administration and management of a National Network consisting of Novell NetWare, Windows NT servers, and various Unix systems. Responsible areas included email, web server administration, VTC support, employee staffing and training, vendor relations, facility management, configuration management, router configuration and security, system and network security, system and network performance monitoring and documenting, firewall configuration and management, Network Intrusion detection systems, network administration and management, RAS, and day-to-day information technology operations. Special recognition was received by migrating from one Internet domain name to multiple Internet domains doing an agency re-designation ceremony.
1998 : 2000
MadenTech
Windows NT/Novell Enterprise Manager
Company:
National Academy of Sciences
Years of Experience:
36
Skills
Active Directory, ARCsight, C, Computer Security, Disaster Recovery, Enterprise Software, Firewalls, HTML, IDS, Information Assurance, Information Security, Information Security Management, Information Technology, Integration, IPS, IT Management, Java, Linux, Microsoft Office, NDS, Network Administration, Networking, Network Security, Penetration Testing, Program Management, SDLC, Security, SEIM, Servers, SQL, TCP/IP, Unix, Unix Operating Systems, VMware, Vulnerability Assessment, Vulnerability Management, Windows, Windows Operating Systems, WIPS, Windows Operating
About
Solutions-focused, team oriented, and highly effective Senior Information Technology Engineer with broad-based experience throughout the IT life-cycle in real-time and mission critical systems. Proven experience in computer systems ranging from desktop to super computers, supporting desktop applications to enterprise-wide applications, networking, group collaboration, project management, and IT security within organizations.
Profile Photo
