James Hoover

About James Hoover

I\'m a Gartner analyst covering IAM topics including user authentication, verification, and ITDR. I\'ve written and presented on not only technical topics like dealing with service desk social engineering, but also on the pernicious cultural issues the security and identity spaces face-from how we view, treat, and communicate with our co-workers, to picking tools before we actually know what we\'re trying to accomplish. I want to see us all be better. I want to see the industry start taking human centric approaches, to advocate for and communicate with the populations we as security professionals serve, and to realistically prepare them to operate safely in the face of current threats. If you\'re interested in moving us all forward together, let\'s talk.

Experience

1. Senior Principal Analyst

   Gartner

   Jan 2021 — Present

   I provide expertise and guidance to security and risk leaders on those areas where information security and IAM start to bleed together. I offer insight on complex topics and translate technical information about security and identity issues, ongoing threats, and functional mitigations into actionable next steps for leaders and executives. Identity-first security, Identity Threat Detection and Response (ITDR), user authentication, privileged access, and all of the ways those controls intersect with human populations are the bread and butter of my daily client conversations. I\'ve published on Just In Time PAM, securing credential management processes, human first approaches, Identity-First Security, Passwordless authentication and more.

Education

• East Carolina University

  Bachelor’s Degree

  2010 — 2015

• Capitol Technology University

  Master’s Degree

Skills

• Security Frameworks
• Process Improvement
• Xpath
• Computer Security
• Powershell
• Information Security Policy
• Penetration Testing
• Threat & Vulnerability Management
• System Deployment
• Troubleshooting
• Project Management
• Disaster Recovery
• Information Assurance
• Red Hat Linux
• Enterprise Security
• Firewall Configuration
• Operating Systems
• Training
• Vulnerability Assessment
• Information Security
• Metasploit
• Shell Scripting
• Security
• Html
• Python
• Risk Assessment
• Risk Management
• Xml
• Openvas
• Infrastructure