Ryan Rathe
Details
American Express
Information Security Manager
World’s largest domain name registrar and web-hosting provide with over 13 million customers Responsible for security monitoring, incident handling, forensic investigation, and zero-day research as a member of a 24x7 SOC. Key detection systems included Cisco Guard, Peakflow X, Tipping Point IPS, Tripwire, Network General, Snort, SourceFire, Symantec AV, WebSense, AppScan and Encase. Expert in computer forensics and incident handling. Performed hundreds of in-depth forensic investigations of compromised customer websites and dedicated hosts. Using various white-hat hacker tools and an in-depth understanding of exploits, manually correlated process activity, system logs, incoming/outgoing connections, and malicious files to identify the vulnerabilities and exploits used. Reported zero-day vulnerabilities to Symantec, CERT and other security research organizations.
2006 : 2007
GoDaddy
Security Administrator II
Global business consulting and internal audit firm with 70 locations in 20 countries Performed information security audits, risk assessments, and penetration testing for Fortune 500 companies. Managed a global implementation of ISS vulnerability management systems for an international bank.
2004 : 2005
Protiviti
Senior Consultant
1997 : 2002
Symbol/Advanced Wireless
Security Consultant
2nd largest food services distributor in the US with annual revenues exceeding 20 billion. Project managed the following : FortiGate UTM firewall and content filtering solution, Office 365, Tivoli/Sun/Oracle IDM, F5 Application Delivery Controllers LTM/ASM, Federation and Single Sign-on, RSA Data Loss Prevention, PCI Compliance, Credent end-point encryption, Symantec Netbackup, Enterprise Vault , EMC DataDomain, Nexus Data Center switching, COBOL and IDEAL to Java code conversions, and VMWare ESX virtualization. General Responsibilities including but not limited to : Managing cross-functional project teams ranging from five to thirty individuals. Acquiring and managing contractor teams (direct oversight). Contract review, negotiation and selection. Solution architecture and design.
2011 : 2015
US Foods
IT Project Manager
About
Information Security Experienced IT Security professional with proven skills to develop, manage and support a comprehensive IT security program with a layered security approach and a focus on the implementation of policies, processes, and procedures. Excellent problem-solving skills with the ability to effectively communicate complex technical information to non-technical stakeholders. Expert at maintaining security through prevention, detection and investigation. Core Competencies• 24x7x365 Managed Security • Cloud-Based Solutions • Security Audit, Compliance• Network Threat Monitoring • Firewall Access Control Mgmt • Network Load Balancing• Incident Response/Mitigation • Vulnerability Assessment • Security Awareness Training• Intrusion Prevention • Penetration Testing • SIEM Logging and AnalysisTechnical ProficienciesCertifications: Certified Information Systems Security Professional (CISSP), GIAC Certified Intrusion Analyst (GCIA), Cisco Certified Network Professional (CCNP), Check Point Certified Security Administrator (CCSA), Sun Certified Systems Administrator (SCSA), Microsoft Certified Systems Engineer (MCSE), Stanford Certified Project Manager (SCPM), Project Management Professional (PMP) and Certified Scrum Master (CSM).Security Systems and Tools: Symantec Enterprise, Fortinet UTM solutions, RSA DLP, Cisco ASA/Pix, F5 LTM/ASM/GTM, Peakflow X, Tipping Point IPS, Tripwire, Network General IPS, WebSense, BlueCoat, AppScan, Cisco ASA/PIX, Snort, MySQL, Nessus, Nikto, Cisco Network Intrusion Prevention Sensor 4215 (NIPS), Cisco ASA & PIX Firewalls, Rapid7 NeXpose Vulnerability Scanner, Qualys Scanner, Patchlink, and Credent, PowerShell, Xpress, Ruby and Perl.Other Systems: Sun IDM, Oracle IDM, Tivoli IAM, Office 365 Enterprise, Cisco Nexus 2K/5K/7K switching, Windows servers and desktop, Linux, BSD, Solaris, Mac OS X, VMWare ESX, Delphix