Doug Kuhlman

Sr. Director of Product Cybersecurity at Lutron Electronics

Allentown, PA, United States

Details

Education: Doctor of Philosophy (Ph.D.)

Mathematics

University of Illinois at Urbana-Champaign

1995 : 2000

BA

Mathematics, Computer Science, Religion

Wartburg College

1991 : 1995

Experience: I am in charge of all things cybersecurity for all of Lutron engineering. I built a review process and procedure from scratch, which covers hundreds of different products and product families. I worked with legal on what compliance requirements to cover, with the engineering teams on how to achieve and measure requirements, with product and project management on how to prioritize security, and a host of other teams. I introduced Static Analysis Security Testing (SAST) within the organization, set requirements, and served as override authority, when needed. I drove the elimination of insecure protocols, the selection of a secure cloud portal for devices, end-of-support for certain products, and a score of other activities around safeguarding Lutron’s brand and reputation by adding security by design. I performed all these actions with basically no budget by building mindshare across the entire organization -- from senior management down to developers writing code and all points in-between. I am the ultimate source of accountability within Lutron for the cybersecurity of our products.

In this role, I additionally was the public face of Lutron cybersecurity to customers, to the board of directors, and integration with Legal and IT. I helped drive additional revenue by assuaging customer doubts, driving us to compliance with government requirements, and reducing risk.

In May, 2022, I was promoted to Senior Director level (officially Senior Consultant in Lutron language).

2016 : Present

Lutron Electronics

Sr. Director of Product Cybersecurity

I worked with a team on Big Data analysis in the cloud. I have learned PaaS, SaaS, IaaS, as well as Spark programming, and various visualization tools. I worked the entire spectrum of the business product, from customer demonstrations to architecture and design, through data modeling and coding. This experience helped to strengthen my end-to-end understanding of business.

2013 : 2016

ARRIS

Distinguished Advanced Research Engineer

I had primary responsibility for a team of 3-10 engineers (primarily programmers) working on the security, privacy, and scalability problems of collecting, analyzing, storing, and sharing massive amounts of data. My team led integration efforts with three different shipping products while developing our own product in this time. Personally, I did security analyses of our framework, as well as of each of the integration points, in addition to serving as Project Manager.

Reason for departure : Acquisition to new company

2000 : 2013

Motorola Mobility

Senior Security Research Engineer

1993 : 1995

CUNA Mutual Group

Intern Programmer

Company: Lutron Electronics

Years of Experience: 26

Spoken Language: German

Skills

4G, Algorithms, Architecture, AWS Security, Big Data, Board of Directors Reporting, C++, Cellular Communications, ClearCase, Cloud Computing, Cloud Security, Communication, Cross-functional Team Leadership, Cybersecurity, Cybersecurity Incident Response, Data Analysis, Data Privacy, Embedded Software, Embedded Systems, Encryption, Enterprise Architecture, Information Security, Integration, Linux, LTE, Management, Mathematics, Mobile Devices, Security, Security Operations, Statistics, System Architecture, Telecommunications, Wireless

About

Experienced Security Leader with proven ability to build an entire product security organization from scratch, covering all aspects from coding to DevSecOps to architecture to legal compliance and all points in-between.

Trusted architect who has overseen planning of systems ranging in size and scope from fully-interconnected IoT-cloud hybrid systems to independent small systems optimized for speed, reliability, or confidentiality.

Skilled communicator with experience presenting to a variety of audiences -- software developers, project managers, senior executives, legal experts, boards of directors, and others.

Proven innovator with impact ranging from individual contributions like authoring patents to developing new business functionality to adding missing critical elements to engineering processes.