Kevin Smith

About Kevin Smith

An innovative and dynamic IT Security Analyst and Enterprise Support Leader with a progressive career focus on product security, information security, and data privacy. I have extensive experience driving standards and best practices for remediating product and platform vulnerabilities in collaborations with service owners, application teams, infrastructure, and security teams. I built a reputation for technical and operational excellence that encouraged leadership and peers to reach out for consulting support on various security and support issues. BA in Telecommunication, Information Studies and Media and ITIL V4 certified.Performance Snapshot: Researched, ideated, and developed guidance and documentation for Cisco\'s OpenStack product development platform security guardrails. I was entrusted by leadership as the liaison between Cisco Security Trust Offices and Internal IT Teams while supporting critical Order Management systems that drive up to $50B in revenue. SECURITY AND SUPPORT KNOWLEDGE AREASApplication and Product Security Analysis• Infosec •Security Roadmap •Security Policy Development •Product Architecture Review •Large Scale Vulnerability Patching • Data Security •DAST•SAST• Vulnerability Management •Security Tools •Configuration Hardening •Application Teams •Metrics and Best Practice Development •Enterprise Application Support •Threat Intelligence •Cybersecurity Risk Management •Professional Services • Partner Management •ERP •Supply Chain and Order Management• Follow the Sun Support Model •Agile •Cybersecurity Awareness k••••••••@gmail.comPh:

Experience

1. Partner Security Architect Advocate

   Cisco

   Feb 2016 — Present · Raleigh-Durham, NC, US

   Outstanding performance as an Incident Analysis Manager/Service Lead led to an added role as a liaison between the Cisco Security & Trust Office and the internal IT team (Management & Finance - Order Management).I educate and track the application development teams\' progress on new and changed corporate policies and best practices for secure product development, information security, and data privacy. In addition, I provide SME support on Rapid7 InsightAppSec, Checkmarx, and Tenable security tools.Notable Accomplishments:Collaborated with the Cisco Security & Trust Office in several \"Hackathons\" to help research, ideate, and develop documentation and guidance for security guardrails for the OpenStack platform at Cisco. Improved future-ready security posture by guiding the application development teams in running security scans for 12 applications in our portfolio. Identified security gaps by ensuring pre-production automated scan coverage on Java-based web applications and JSON-based web services. Collaborated with the development team on Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Software Composition Analysis (SCA), and vulnerability management.Introduced and regulated standards for patch management and configuration hardening with service owners, application teams, and infrastructure and security teams. Facilitated remediating product and platform vulnerabilities during scheduled and unscheduled escalated activities.Delivered insights to Cisco security governance teams that provided visibility into the application team\'s progress on pain points that impacted roadmap priorities for feature enhancements.Verified metrics and worked with the departmental security prime preparing risk readouts to service owners and department leadership.

Education

• Michigan State University

  BA, , Telecommunication, Information Studies and Media

• Michigan State University

  BA, International Relations