Edward T.
Details
Crisis/Emergency/Disaster Management
Emergency Management Academy
2011 : 2012
Lean Six Sigma Green Belt
2012 : 2013
B.A
Philosophy
George Mason University
1992 : 1995
Schneider Electric
Director of Cybersecurity Offer Managment, Schneider Electric
2017 : 2022
Nexus Controls, a Baker Hughes business
Global Cybersecurity Solution Architec
GE Oil & Gas – Industrial Control System Cyber Security – Commercial Leader Longmont, CO. 3/12 – Current
Positions cyber security expertize on products & services driving global revenue on multi-year support agreements. Grows & enables the GE commercial team to obtain cyber-security revenue. Reviews complex Industrial Control System (ICS) environments providing cyber security solutions & services for customers with GE Power Generation, Oil & Gas, Aero & Power Distribution equipment. These Critical Infrastructure facilities primarily have MarkVIe controllers supporting Nuclear, Gas, Steam, Compressor, Wind and Excitation, utilizing CAP, SecurityST, and NetworkST cyber solutions. Translates the customers cyber-security Critical To Quality (CTQ) requirements into GE solutions.
• Key technologist, subject matter expert, & application engineer for all things cyber-security.
• Contributed $24+ MM in 2014 YTD in cyber security orders.
• Trains the global Sales & Commercial Team on customer’s security perspective of critical industrial controls.
• Provides onsite sales support for customers in North America, Europe, Brazil, Asia, African & Middle East.
• Commercializes quoting & scoping of cyber security, enables conversation guide outputs, simplifies appropriate technical selection of base & plus options, identifies engineering contingencies.
• Key technical resource on all large and/or complex cyber security opportunities.
• Increases contribution margins by reducing technical inaccurate responses & decreasing specification gathering cycle time (from weeks to days). Lean Six Sigma Green Belt Certified.
• Presents to multiple customers, tailoring custom solutions, helping them obtain a high degree of operational maturity, promoting good cyber security strategy & demystifying technical complexity.
• Assists marketing team with Publications, Videos & Whitepapers. Translates compliance specifications such as NEI 08-09, NERC, WIB, IEC 62443, ISA, QATAR and others.
2012 : 2022
GE Oil & Gas
Industrial Control Cyber Security Technologist
Responsible for daily operations of the Infrastructure Defense and Security Operations Center (SOC) for Production Operations - network consisting of 35,000 endpoints nation wide.
• Reorganized the 24/7 operations into a much more efficient machine by prioritizing key SOC/CSIRC processes by; level of complexity, primary shift dependence, primary and desired SME’s and remediation time for future Service Level Agreements.
• Kicked off CIA project from building key trust relationships with ISO’s. Sold our 24/7 monitoring as a service to help protect Critical Infrastructure Assets (CIA). Gathered infrastructure details; identifying future placement of HIDS/NIDS and for inclusion of host info into SOC/CSIRC incident monitoring tools – zeroing in on true security concerns/alerts.
• Implemented daily customer operation calls (stand up calls); focusing in on last 24 hours of most significant events, situational awareness and tool/health concerns. This greatly increased customer involvement, trust, and understanding of environment.
• Managed staff performance through “process accountability” - a philosophy of awarding contributing individuals by giving them key process ownership. Since I had already prioritized our processes this transparent design made management much easier, removed process ambiguity by identifying who is in charge, while preventing bad handoffs or “ball drops”.
• Expanded/improved SIEM coverage/correlation rules.
• Key participant in SAIC RFP writing, particularly over SOC/CSIRC areas.
• Key customer relationship manager between multiple highly political and sometimes very divided government leads. Provided sound guidance without damaging political relationships.
2009 : 2012
SAIC
Infrastructure Defense & SOC/CSIRC Manager
Responsible for daily security operations management of the Infrastructure Defense & Security Operations Center (SOC) for Production Operations of the Department of Homeland Security (DHS), Immigration and Customs Enforcement (ICE) network consisting of 35,000 users, including leading security Incident Response, Vulnerablity Management and federal compliance requirements
2009 : 2012
DHS
ICE SOC/CSIRC & Infrastructure Defense Manager
Skills
Accreditation, Business Continuity, CISM, CISSP, Compliance, Computer Security, Cyber Security, Data Center, Disaster Recovery, Disaster Response, DLP, Emergency Management, Emergency Operations, FISMA, High Availability, Identity Management, IDS, Information Assurance, Information Security, Information Security Management, Information Security Policy, Information Technology, Intrusion Detection, IPS, IT Audit, ITIL, IT Risk, Network Security, NIST, Organizational Leadership, Patch Management, Penetration Testing, Policy, Privacy, Security, Security+, Security Assessments, Security Audits, Security Awareness, Security Management, Security Policy, Security Policy Development, SIEM, Strategic Leadership, Team Leadership, Teamwork, Technical Leadership, Vulnerability Assessment, Vulnerability Management, Vulnerability Scanning
About
The biggest impression you will obtain from me is that I always bring enormous attention and focus, providing expert guidance, while keeping cool under pressure. What sets me apart from most of my peers is I have been fortunate to have lead resolutions of real security challenges while holding major responsibilities.
I describe myself as a mature and senior member in Cyber Security industry, 18 years’ experience from working with commercial and government clients. I have worn many “hats”; from as a former deputy CISO building new cyber programs, from global commercialization of new product lines, from sales engineering, from performing security assessments (NIST CSF), as a consultant, from auditor to being audited, as disaster recovery coordinator, from protecting a major corporation from a lawsuit, as a board member, from managing several compliance programs. Lastly I directed a 24/7 Dept. of Homeland Security Security Operations Center / Computer Security Incident Response Center (SOC/CSIRC) for the second largest law enforcement agency in the U.S.
Currently I am the Director of Cybersecurity Offers at Schneider Electric Energy Management, commercialization new lines of cybersecurity solutions. I server as a thought leader on all things cyber security. I frequently present to customers, giving them realistic strategies for risk management, demystifying complexity, and removing traditional Information Technology (IT) vs. Operational Technology (OT) barriers.
Edward Turkaly CISSP, GICSP, FAcEM, FITSI-P, CSSA, Lean Six Sigma Green Belt