My career started in  product development and working with great teams to develop new technologies, products, and services.  Analyzing data, identifying insights, and finding solutions are the common factors through my career.  Most recently, I have worked in information security, privacy, and risk to help organizations with protecting information assets, identifying sources of unknown risk, and educating executives and IT staff on enhancing exiting security and privacy for the use and storage of data.

Education has played an important role in the ability to work in newer technology arenas.  Most recently, I decided to complete two masters’ degrees in cybersecurity and data science.  After working with newer technology architectures and analytics technologies, I found that formal training was the best approach to defining sufficient skill sets.  Work experience is important but does not fully address knowledge requirements in modern information technology systems and related services.

  • Identification of individuals in data breach investigations (terabytes of data. 20 – 100K+ people)
    • Development of pattern analysis requirements in text and structured data
    • Recovery and rebuilding deleted data sets
    • Working on modern data storage formation: JSON, key/value pairs, distributed databases
  • Practical security and privacy for new technology and products
    • Providing cost-effective security options to reduce data breach risk
  • Improving website security to reduce risk of security incidents
    • Defining security program requirements for web-enabled technologies
    • Post data breach security improvements to reduce chance of future breaches
  • Healthcare data risk advisory
    • Validating anonymization protocols for release of patient data to third-party using search text analytics
    • Identifying improperly stored patient data due to improper EHR software design
    • Verifying malware and intrusion containment. Fingerprinting attack vector after incident response remediation
  • Technology consulting in legal matters
    • Interviewing IT and InfoSec staff to determine technology implementations
  • Investigations requiring data analytics expertise
  • Forensics investigations involving theft of analytics and code
  • Security with prevention best practices
  • Using security to improve data quality
    • Training healthcare analysts to improve data quality with security tools
  • Technology gap assessment in security programs
    • Identifying security risks in development environments
  • Data risk exposure using forensics to assess risk