Lance Rosengarten

Background

About Lance Rosengarten

I am a cybersecurity professional and trusted advisor with experience building robust security programs. I have a deep understanding of how cyber risk management, security operations, and threat intelligence is applied across numerous industry sectors and organizations. Specialized in identifying and mitigating attack vectors, reducing exposure to cyber threat actors, as well as identifying countermeasures to reduce the likelihood and potential impact of an attack on an organization. Experience in monitoring, researching, investigating and analyzing security threats and trends to verify the effectiveness of protective measures in GSuites, Microsoft Server & Active Directory. Experience with hardening the IT environment to reduce risk and identif y potential issues. Maintain proper access controls to protect critical assets from unintended access. Has the ability to manage security training programs and user education. Familiarity with reviewing and controlling data loss vectors and associated risk Familiar with security concerns specific to SaaS deployments. s. Hands on knowledge of Identification and Analysis of anomalous activity in systems logs and other event data (e.g. Splunk, Open Source, and other SIEM tools). Knowledge of penetration testing and risk analysis of services, sites, and infrastructure. Can assist with the development, periodic review, and compliance of cyber security policies, procedures and standards. Experience in a cross functional capacity with procurement, IT, Systems and Network, MIS, Customer Service and other teams to assist with the security analysis of potential vendors and products. Can conduct analysis, development, and implementation of firewall policies on operating systems with a focus on Windows. Proven customer service background at all echelons. Experience with assessing technical security risks associated with environmental changes on new and existing technology. Knowledge of data security protection consistent with the organization’s risk strategy to protect the confidentiality and integrity of company information CYBERSECURITY THREAT INTELLIGENCE HUNTING TECHNIQUES NETWORK AND SYSTEMS SECURITY SIEM TOOLS AND TECHNIQUES GRC CODING LANGUAGES PENETRATION TESTING TOOLS AND TECHNIQUES CLOUD FUNDAMENTALS(LaaS, Paas, SaaS) FedRAMP et al FAMILIARITY WITH AWS VPC TECHNOLOGY VMWare Virtual WIRESHARK NMAP OWASP SQL CERTIFICATES AND TRAINING CompTIA Security+ Certified in Cybersecurity by (ISC)² Hack the Box Academy and Labs Cyber Apocalypse 2023 - The Cursed Mission (CTF)