Brett Coon
Details
Management
University of Phoenix
2006 : 2008
2021 : Present
McGuireWoods LLP
Director of Information Security
Headed enterprise security architecture design and security engineering design teams focused on maturing of endpoint and network security programs for on-premises and cloud workloads adhering to PCI DSS, FFIEC, and NIST frameworks across 200,000 endpoints and over 1,500 network security devices.
• Reduced operational cost over $1.5 million purging redundant controls and vendor renegotiation.
• Led Purple Team (Red Team/Blue Team) coordination of addressing open vulnerability assessments, penetration testing findings, and MITRE ATT&CK framework, decreasing attack vectors by over 25%.
• Employed cloud automation ensuring near 100% security control policy compliance.
• Conducted over 20 corporate assessments for governance, risk management, and regulatory compliance ensuring corrective actions (acceptance, mitigation, transference) of residual risk.
2019 : 2021
FIS
Director Security Solutions Architecture and Engineering
Selected, designed, built, and operated security controls protecting over 120,000 endpoints.
• Restructured organization into an engineering and 24x7x365 operations environment, offering immediate response capabilities and escalation.
• Delivered 100% Insider Threat visibility to data privacy concerns by data loss protection of web, print, network, and email monitoring.
• Implemented database access monitoring, achieving 100% visibility to PCI data requests.
• Completed integration of 4 acquisitions, achieving security control compliance with $1 million in savings.
2016 : 2019
FIS
Senior Manager Information Security Operations and Engineering
Managed architecture of endpoint protection and perimeter security, security operations center (SOC), incident response, and vulnerability management across 15,000 endpoints protecting manufacturing systems.
• Ensured program maturation by forecasting $5 million budget using 12, 24, and 36-month forecast.
• Replaced legacy SPAM solution increasing protection from less than 50% to more than 95%.
• Improved Security Operations Center SIEM response times to under 60 minutes by staging desktop exercises.
2015 : 2016
CommScope
Senior Manager Information Security
Led operational management of antivirus, application control, and incident response tools across 40,000 worldwide endpoints safeguarding banking technology.
• Created first operational Information Security Tools team with 24x7 support and 15-minute response time.
• Eliminated installation of unapproved software by over 90% through whitelisting deployment.
• Improved compliance of endpoint controls from less than 80% to 99% by continuous reporting.
2013 : 2015
Fidelity National Information Services
IT Security Manager Information Security Endpoint Controls
Skills
Active Directory, business process improvement, Computer Security, Data Center, Disaster Recovery, Hardware, High Availability, Incident Management, Information Security, Infrastructure, ITIL, IT Management, IT Solutions, Microsoft Exchange, Microsoft SQL Server, Network Security, Operating Systems, Process Improvement, Routers, SDLC, Security, Servers, Service Delivery, Strategy, System Deployment, Troubleshooting, Vendor Management, Virtualization, VMware, VPN, Windows Server
About
Senior leader with over 30 years of success in information technology and cybersecurity.
• Assessment of risk and recommend administrative, technical, and security policy controls to develop corporate strategy and reduce exposure.
• Use foundation in military discipline to implement and enhance IT service management, business process, and methodology.
• Build teams through staffing and coaching to encourage development of talents and skills.
• Maintain security and risk competence following trends, industry news, and security product changes.
• Plan budgets for optimized spending based on current and forecasted projections.