Robert Michel

About Robert Michel

Robert Michel holds the position of Director of Cloud Security at Lenovo\'s Global Security Lab. He is responsible for cloud product security and leads the Penetration Testing, DevSecOps, and Security Operations Center teams. Over the course of his career in cybersecurity, Robert has implemented incident response strategies, security awareness campaigns, threat modeling, and professional training initiatives for a variety of organizations. His background also includes designing network security solutions across a diverse range of organizations in various industry sectors. Driven by his dedication to cybersecurity, Robert holds or has held certifications from SANS, Microsoft, Cisco, EC-Council, CompTIA, and ISC2. He also holds degrees in Computer Communications and in Cybersecurity and Information Assurance.

Experience

1. Director, Cloud Security

   Lenovo

   Jan 2022 — Present

   Initiating Artificial Intelligence security product: Establishing AI product review processes, ensuring AI integrated products are using AI in a secure manner. Creation of an AI Security Review Board to handle most of the AI integrated products. Implementing AI into Pen testing, DevSecOps and SOC team’s tooling and processes. Heading Global Penetration Testing Initiatives for Enhanced Product Security: Supervising an expert team of in-house penetration testers while orchestrating external penetration testing and Bug Bounty programs to fortify product security and integrity.Directing DevSecOps Team for Robust Lenovo Cloud Product Security: Overseeing the execution of DAST, IAST, SAST, RASP, and container cloud tool selection, deployment, and seamless integration with development teams. Championing \'shift-left\' methodologies and strategies to expedite secure product releases.Establishing and Operating the Product Security Operations Center (SOC) for Internal Product Teams: Responsible for comprehensive monitoring, incident response, threat hunting, and threat intelligence initiatives to safeguard product security.Managing the Product Security Standards & Compliance Program: Pursuing esteemed product certifications, including ISO27001 and Cloud Security Alliance STAR, to validate product security and compliance with industry best practices.Guiding the Product Vulnerability Management Program: Collaborating with development teams to assess and address vulnerabilities within established SLAs, ensuring continuous product improvement and heightened security.

Education

• Cincinnati State Technical and Community College

  AAB, Computer Communications

• Western Governors University

  Bachelor of Science, Cybersecurity and Information Assurance