Seth Smith

About Seth Smith

Exceptionally resourceful, competent and effective cyber security project leader with 20+…

Experience

1. Federal Government Senior Analyst Engineer Pci Compliance Tier-0 Professional

   Peraton

   Jul 2021 — Present

   Contracted by USPS CISO for Tier-0/PCI In-Scope compliance. Tier-0 systems are scanned semiweekly and pen tested frequently for significant changes and compliance. PCI applications/network undergo semiweekly vulnerability scans and semiannual penetration tests and any significant change in code as part of USPS PCI compliance. With the findings multiple reports are generated to present the vulnerability data in understandable ways to help the application, middleware, database, network and other required USPS teams mitigate/remediate the findings. Report findings to the application teams and work accordingly to help the teams remediate the vulnerabilities to mitigate risk to the in-scope systems which could negatively impact day to day operations for USPS. Effectively protecting and securing customer PAN for USPS generating the most ecommerce sales in the United States, tens of billions of dollars of transitions per year. Current statistic 86% of business fail the PCI assessment in the second year. Maturing the PCI program as the lead and senior member of the USPS PCI team to date we have been PCI compliant for well over a decade demonstrating the success for vulnerability scan remediation management/pen test assessments and remediation of in-scope PCI systems. Other notable experience working for USPS include having ten years\' experience in all three areas of operations including (Threat Intelligence, Threat Detection, Incident Response) along with an extensive network of employee relationships, working with the ASV/QSA for PCI compliance, monitoring IDS solutions Splunk/Symantec SSIM/Tanium/Redseal/BDNA, involvement with DLP words of concern, DLP DAR to quarantine/remove PAN and PII data found on USPS servers, Rapid7 Nexpose and Tenable SecurityCenter Nessus for vulnerability management/data mining, P2PE assessments, SSL and TLS 2.0 integration. ServiceNow for CIRT ticket creation/tracking and writing numerous SOP’s for CISO.

Skills

• Cms
• Information Architecture
• Content Management
• Xhtml
• Project Management
• Pci Dss
• Databases
• Analysis
• Training
• Information Security
• E-Commerce
• Dreamweaver
• Security
• Sdlc
• Google Analytics
• Integration
• Customer Service
• Css
• Information Technology
• SEO
• Web Development
• User Interface Design
• Editing Html
• Disaster Recovery
• Wordpress
• Web 2.0
• Intrusion Detection
• Html
• Network Security
• Web Project Management
• Data Loss Prevention (Dlp)
• Computer Incident Response Team (Cirt)
• Leadership
• Html 5
• Web Applications
• Sem
• Management
• Patch Management
• User Experience
• Flash