Adam Sessanna

WORK HISTORY

ABOUT ADAM SESSANNA

Information Security Leader with over 20 years of experience, with a proven track record of success across financial, media, cloud, and aerospace industries. Skilled at balancing business needs with security objectives, with a deep understanding of the organization\'s goals, objectives, and operations. Expert in identifying and mitigating risks, staying ahead of emerging threats, and ensuring the organization\'s security posture is aligned with its mission. Expertise in security architecture and engineering, cloud security, security operations, incident response and forensics, threat modeling, network security, as well as security frameworks, standards, and regulations. Proven ability to lead and mentor security teams, as well as develop and deliver security awareness and training programs.Security Architecture and Engineering: Designing, implementing, and managing security solutions for complex, hybrid environments.Cloud Security: Proficient in securing AWS (including GovCloud), GCP, and Azure (including Government).Security Operations: Experienced in implementing best practices and maintaining robust security operations processes to ensure proactive threat detection, effective incident management, and continuous improvement.Incident Response and Forensics: Proficient in conducting effective incident response activities and forensic investigations. Experienced in coordinating with third-party experts, insurance companies, and law enforcement agencies to effectively respond to and investigate security incidents.Threat Modeling: Identifying security risks and vulnerabilities through complex system threat modeling and guiding product security decisions.Network Security: Expertise in designing, implementing, and managing network security solutions, including firewalls, intrusion detection systems, and DDoS defense.Frameworks, Standards, and Regulations: Demonstrated knowledge of and experience with: CMMC, NIST CSF, NIST 800-171, SOX, GDPR, CCPA, PCI DSS, and SOC 2.Security Assessment and Testing: Thorough assessments and testing of complex systems, identifying risks, vulnerabilities, and threats, and validating security controls.Security Awareness and Training: Developing and delivering comprehensive security awareness and training programs.Leadership: Proven ability to lead, mentor, and motivate teams.