B. J. Deramus

About B. J. Deramus

Experienced Cybersecurity Risk Professional with years of IT leadership and cybersecurity expertise, specializing in information security governance, risk management, and compliance. Proven track record in managing and safeguarding complex systems, ensuring compliance with industry regulations such as NIST, FISMA, HIPAA, SOX, and PCI-DSS. Skilled in developing and implementing security policies, procedures, and risk mitigation strategies to protect critical assets. Expertise in conducting risk assessments, security audits, and vulnerability assessments, and in managing security controls and incident response protocols. Proficient in using advanced security technologies, including firewalls, IDS/IPS, DLP, and SIEM tools, to monitor, detect, and respond to security events. Adept at leading security awareness training, educating stakeholders on security best practices, and ensuring continuous improvement of security postures. Strong communicator, skilled in collaborating with cross-functional teams to align security initiatives with organizational objectives and ensure the protection of sensitive data and systems.

Experience

1. Sr Security Engineer

   CVS Health

   Oct 2022 — Present

   Developed and executed technical strategies aligned with CVS Health’s security vision and business goals.Defined scope and processes for the threat intelligence program; integrated ThreatConnect for centralized threat data collection and analysis.Led selection and deployment of CrowdStrike Cloud Security, ensuring full coverage across on-prem and cloud assets.Enhanced detection and response by integrating CrowdStrike Falcon Intelligence and threat indicators into Splunk SIEM.Built a dynamic threat intelligence library of IOCs and detection rules to support threat hunting and SOC operations.Conducted cybersecurity risk assessments, delivering insights to guide compliance and threat mitigation.Oversaw endpoint policy governance and control assurance to ensure alignment with standards and regulations.Directed migration from legacy MDM to Intune, advising teams on endpoint security and access control.Designed automation scripts for device configuration and compliance in cloud environments.Managed monitoring of endpoint security across cloud and on-prem, proactively addressing vulnerabilities.Produced threat intel reports and executive briefings to inform stakeholders of evolving threats.Performed GRC activities, including audits, control validation, and risk analysis.Developed operations reporting strategies to support leadership with key insights and metrics.Cultivated vendor relationships and peer collaboration for enhanced threat sharing.Documented endpoint architecture and led technical upgrades and integrations across enterprise systems.Engaged with stakeholders on data exchange and technology coordination.

Education

• Troy University

  a Bachelors of Science degree, Computer Science

  2003 — 2005

• Auburn Montgomery

  Bachelors of Science degree, Computer Information Systems

• Auburn University at Montgomery

  BS

  2005 — 2007

Skills

• Windows Server
• Information Security
• Network Security
• Security+
• Security
• Troubleshooting
• Active Directory
• Network Administration
• Networking
• Servers
• Information Assurance
• Comptia
• Firewalls
• Bmc Remedy
• Vulnerability Assessment
• Computer Security
• Tcp/Ip
• Security Clearance
• Dod
• Dns
• Cissp