Todd Hillegass

About Todd Hillegass

Managed Cloud Security team focused on automating security controls at scale through a…

Experience

1. Vice President - Cloud Security

   PNC

   Jul 2021 — Present

   Senior Security Manager focused on Cloud Security. Lead a team of Engineers focused on securing public cloud and operationalizing security controls. My focus is on the following components of securing public cloud- Lead the creation and deployment of security controls that are integrated into the Infrastructure as Code (IaC) pipeline. By deploying the public cloud security controls that are PNC\'s responsibility, we are able to secure the public cloud workloads at build time, i.e. shift security left. These controls are curated through a process that assigns them to the appropriate NIST control and aligns with internal security requirements- Post build, post deployment, my team has built and configured the continuous assessment of deployed services against the build time security to controls to ensure continuous compliance. These control validations are then used to inform our Source of Record for violations and to assign the violations to appropriate resource owners and when sufficiently egregious warrant a manual or automated response to resolve-I lead the creation of our cloud security dashboard, which is used to collect and report on Key Performance Indicators and Key Risk Indicators to internal stakeholders including auditors, senior leaders, internal IT operations, and internal customers. My duties include setting the strategic direction for my team and prioritize the most impactful security controls for public cloud, which includes both workloads and workforce. I work closely with my managers, tech lead, scrum master, and product owner to analyze and asses planned work and new requirements that are brought forth from risk, compliance, operations, and customers. I coach and lead my team and have created a team manifesto and mission to help us with expected and appropriate behaviors in a highly collaborative and high performance, virtual team. I continually review KPIs to ensure we have the appropriate skills and resources.

Education

• Penn State University

  Bachelor of Science, Electrical and Electronics Engineering

  1989 — 1993

• Cornell University

  Influence without Authority

  2013 — 2013

Skills

• Virtualization
• Integration
• Program Management
• Diacap
• Ip
• Systems Engineering
• Software Engineering
• Active Ts/Sci Clearance
• Defense
• Ethernet
• Dod
• Requirements Analysis
• Networking
• Security
• Engineering Leadership
• Cisco Technologies
• Dodaf
• Network Engineering
• Openstack
• Cmmi
• Cissp
• C4isr
• Security Clearance
• Secure Communications
• Saas
• Microsoft Excel
• Simulations
• Embedded Systems
• Microsoft Word
• Firewalls
• Computer Security
• Requirements Management
• Information Assurance
• Data Center
• Enterprise Software
• Voip
• Cloud Security
• Testing
• Configuration Management
• System Design