Roderick de Rosa

About Roderick de Rosa

Highly detail-oriented Information Security Analyst leveraging over 12 years of dedicated service in the administration and safeguarding of critical assets and infrastructure. Possessing a robust background in managing complex infrastructure projects, coupled with active engagement in the Department of Homeland Security\'s FEDVTE Cybersecurity Program for Veterans, I aim to apply my extensive experience and commitment to excellence to bolster organizational security frameworks. Earned track record of delivering results for organization and team stake holders by prioritizing the dynamic development of cooperative and productive relationships with co-contributors. As a Veteran with a former Secret security clearance, my mission is to fortify digital ecosystems and protect sensitive data against evolving threats, lead efforts to ensure regulatory compliance across hybrid environments, and foster a culture of proactive risk mitigation.3 Time Award Winner -\"NBCU G.E.M\"(Going the Extra Mile Award)- NBCU Award Winner -\"Meritorious Mast\"- USMC - HQ Co. 3rd Marines Former Secret Level Clearance Service Member - USMC Former Cryptography NCO - USMC3-year Honors Graduate - Lane Technical HS - CPSGifted Program Graduate - PCA - CPS • Project Lead - Firewall Infrastructure Hardware Refresh – Calamos Investments • Team Lead - Studio Broadcast Operations – Calamos Investments • Team Lead - Comcast InfoSec Audit and Remediation - NBCU • Project Lead - AWS Elemental Multicast System Integration - NBCU • Project Lead - Media Proxy File Management and Storage - NBCU • Project Lead -(EEC) Mobile Weather System Restoration and Upgrade - NBCU • Project Lead - Zabbix System Monitoring - NBCU • Project Lead - Salesforce Architecture Design and Administration - NBCU • Project Lead - Webservices Solutions Development – NBCUCertificates and Certifications- PCNSA – Palo Alto Certified Network Administrator- VMWare Carbon Black App Control Advanced Administrator – Certification -March 2023- CompTIA Cybersecurity Analyst (CySA+) Prep Certificate -(DHS/CISA)- 2019- Reverse Engineering Certificate -(DHS/CISA)- 2018- Critical Infrastructure Protection Certificate -(DHS/CISA)- 2018 - Root Cause Analysis Certificate (DHS/CISA)- 2018- Salesforce Certified Administrator - February 2022- CompTIA A+ Certification - June 2019In Progress- ISC2 CISSP (Completion Q4 2024)

Experience

1. Information Security Analyst

   Calamos Investments

   Nov 2022 — Present · Chicago, IL, US

   Skills- Azure Security Compliance Framework- Microsoft Cloud Security Benchmark Compliance Auditing- NIST SP800, ISO 2700x Compliance Frameworks - Qualys VMDR Vulnerability Management- Firewall Management and Administration- Windows Defender XDR Administration- Log Analysis- Crisis and Incident Response- PowerShell Scripting and automationPrimary Responsibilities- Manage 25+ Palo Alto Firewalls (Azure Cloud and On-Prem), develop and maintain object schema and naming standards- Manage Endpoint and Network Device Vulnerability Management Program and remediation workflows (Qualys VMDR)- Develop Cloud Vulnerability Management Program (Microsoft Defender for Cloud) and Azure Container Vulnerability Scanning SOP- Manage Cloud Control Framework and Application Control Subsets to ensure compliance with Azure Security Benchmark V3 and Microsoft Cloud Security Benchmark (mapped and aligned to NIST SP800-53, ISO-2700x, and PCI controls)- Monitor Microsoft Defender for Cloud Compliance findings to audit and ensure adherence to established compliance policies and procedures- Manage cybersecurity incident response program, reducing false positives to below 5%- Validate and respond to system alerts, investigate, resolve, and manage incident response- Provide subject matter expertise to technologists, business associates, managers, and executives- Contribute to the development of information security strategy and infrastructure projects- Manage corporate relationships with managed and/or professional information security services firms- Maintain and enhance information security policies, standards, and procedures, document new control requirements and standards- Passionately stay abreast of emerging information security threats, news, and technologies, and share relevant information with appropriate management team members- Participate in disaster recovery planning and execution activities.

Education

• City Colleges of Chicago-Wilbur Wright College

  Gen Eds., General Studies

  2007 — 2009

• Department of Homeland Security / CISA - FedVTE

  CyberSecurity Trainee, Cybersecurity

  2018 — 2021

• Illinois Institute of Art

  Audio Production, Audio Engineering/Video Editing

  2010 — 2012