Kent Knudsen

About Kent Knudsen

Developed an Enterprise IT Risk Assessment Tool (called ISAAC) for the Texas A&M University & System, also adopted by the Texas Department of Information Resources for use at Texas Agencies. Served as ISSO for 7 Federal Enterprise Applications and 2 General Support Systems. Experienced with FISMA and DoD certification. Maintain and monitor 2nd generation firewall IPS and AV alerts at Plains All American for IT and Operations (OT), while building a Security Operations Center with continuous security monitoring via SIEM and SOAR technologies. Conduct physical security reviews at field sites, threat hunting, penetration testing (federal agencies, including DoD), ST & E, vulnerability assessments, create and maintain IT security policies, create and deliver both online and instructor-lead security awareness training, provide incident response handling and cyber investigations.Speaking Engagements / Papers / Accolades-API Pipeline Conference (April 2018): Speaker - Topic:\"Pipeline Security: What\'s Being Done to Counter the Continuing Attacks on Pipelines?\"Texas Dept. of Info. Resources (DIR) Information Security Forum (March 2013): Speaker - Topic:\"Data Breach Panel Discussion: Lessons Learned from the Field\"FBI Washington Field Office/Infragard/GTSC 2012: Speaker – Topic: Cyber Security Awareness Month – “Cyber Threats to Businesses: Trends and Vulnerabilities”US Dept. of Education ISSO Training 2012: Speaker – Topic: “Information System Security Officer (ISSO) Training and Certification Course”US Dept. of Education Annual Security & Awareness 2012: Speaker – Topic: “Annual Information Security and Privacy Awareness”ConSec 2008: Speaker - Topic: “Risk Management Best Practices”FEMA 1st Runner Up, ISSO of the Year 2008Specialties: FISMA and DIACAP Certification and Accreditation, Threat Hunting, Penetration Testing, IT Incident Response, Risk Assessment, and SIEM implementation.

Experience

1. Manager, Cybersecurity Operations

   Enterprise Products

   Jun 2021 — Present · Houston, TX, US

   As the Manager, IT Security at Enterprise Products, responsible for IT Information Security Monitoring, developing and supporting corporate IT Security strategies and safeguarding the integrity of information assets and network connections while providing production support for the security infrastructure for IT assets. My cyber team performs security continuous monitoring, incident response duties and forensic investigation of corporate assets. Further, the team performs vulnerability risk assessments and remediation efforts. I am responsible for implementing next generation security tools, including machine learning and threat intelligence. Working to improve threat hunting/ insider threat detection capabilities.Responsibilities include:• Supervising and mentoring the Security Operations team, while improving security monitoring and incident identification.• Developing and documenting analysis and response processes (playbooks), Incident response and resolution, and Improving enterprise-wide security log collection, correlation, and reporting.• Implementing automation to improve processes and reduce staff time spent on low value tasks, Monitoring for changes in attack surface and risk related to attack surface, Identifying areas for improved security controls and mitigations.• Staying current on and educating others on emerging threats and appropriate mitigation strategies, Incorporating threat intelligence into the monitoring and response process, Producing reports to communicate security risk and status to upper management.

Education

• Texas A&M University

  Bachelor of Science (B.S.), Aerospace, Aeronautical and Astronautical Engineering

  1985 — 1990

Skills

• Information Assurance
• Security
• Intrusion Detection
• C&a
• Computer Forensics
• Disaster Recovery
• Cissp
• Private Pilot
• Security Awareness
• Leadership
• Project Management
• Web Application Security
• Customer Satisfaction
• Vulnerability Assessment
• Risk Management
• Security Testing
• Vulnerability Management
• Diacap
• Certification and Accreditation
• Security Management
• Risk Assessment
• Information Technology
• Security Clearance
• Security Audits
• Computer Security
• Security Policy
• Nist 800-53
• Incident Management
• Dod
• Information Security
• Program Management
• Incident Response
• Business Continuity
• Fisma
• Incident Analysis
• Information Security Management
• Crisc
• General Aviation
• Siem
• Network Security