Jason Rafail

About Jason Rafail

Over 20 yrs of experience in the Cyber Security arena. Specific skills ranging from software tool development & deployment, network security, management, training, creation of policies/procedures, and business development. Company separation & migration to Azure/Cloud data centers.Strong ability to bridge the gap between technical & non-technical people. Extensive experience developing customer relationships & contacts in the public and private sectors. Experienced International & Domestic business developer, collaborative opportunity identification, & evaluation. Invited speaker, panelist and workshop provider at core IT Security conferences, summits and engagements.Specialized skills in Cyber Security include incident/vulnerability analysis & assessment, source code review & analysis, penetration/intrusion testing, web application testing, secure system design, network architecture design, and development of policies & procedures. Creation & delivery of training focused on all of the areas above. The establishment and development of Computer Security Incident Response Teams (CSIRTs) worldwide. Managed several teams focused on delivering products & services to industry and government sectors.Domestic liaison for the following US Government agencies: Department of Justice, Department of State, National Cyber Security Division, Department of Homeland Security, the Federal Bureau of Investigation and United States Secret Service. International Liaison at the CERT/CC hosting and establishing communications with over 80 government agencies (domestic & foreign), International CSIRTs at government, university, & industry levels.Experience working in Nuclear Cyber Security focusing on system hardening and performing auditing and assessments to ensure compliance with regulatory requirements, including 10 CFR 73.54. In-depth experience with the Nuclear Regulatory Commission’s Regulatory Guide 5.71 and the Nuclear Energy Institute’s 08-09, 10-09 & 04-04 guidelines. Performed assessments of Nuclear Reactors in accordance with regulations.

Experience

1. Enterprise Cyber Security Manager

   Latitude AI

   Feb 2023 — Present · Pittsburgh, PA, US

   Managing a highly skilled and productive team providing services and engineering to protect Company Intellectual Property, Systems and Networks. Integrating with various teams to ensure a balance of Security and Functionality are achieved without impacting product development and delivery. Enterprise Cyber Security Services and Engineering team works to develop and implement security policies, procedures, and technologies across the company. Latitude AI is a wholly owned subsidiary of Ford Motor Company focused on developing the next level of automated driving and assistance technologies. Our goal is to give drivers time back during their travels and to transform the driving experience to be safer, less stressful, and more enjoyable for everyone. Headquartered in Pittsburgh with engineering centers in Dearborn, Mich, and Palo Alto, Calif.

Education

• Upper St. Clair HS

  Diploma, Accelerated Mathematics, Chemistry, Biology, Foreign Language

  1991 — 1995

• University of Pittsburgh

  B.S, Computer Science

  1995 — 2001

Skills

• Network Security
• Databases
• Information Assurance
• Computer Security
• Security Policy
• Network Architecture
• Software Development
• Scada
• Penetration Testing
• Computer Forensics
• Integration
• Operating Systems
• Linux
• Security System Design
• Regulatory Guidelines
• Presentations
• Threat & Vulnerability Management
• Cross-Functional Team Leadership
• Data Center
• Software Documentation
• Information Security Management
• Intrusion Detection
• Vulnerability Assessment
• Testing
• Security Policy Development
• Troubleshooting
• Analysis
• Perl
• Security
• Secure Network Architecture
• Management
• Compliance Testing
• Disaster Recovery
• Cissp
• Program Management
• Incident Response
• Business Continuity
• Project Management
• Network Administration
• Firewalls