Tyler Decarlo

About Tyler Decarlo

I am driven cyber security professional that is passionate about improving enterprise wide security posture using risk based approaches. I thrive in complex multidisciplinary environments working with diverse groups of stakeholders ranging from engineers to executive management on a global scale. I am always looking to learn and take on new security challenges. I have experience in a variety of different security domains including- Information security risk management- Cloud security- AI security & risk management- Insider threats- Incident response- Digital forensics- OSINT- Cyber threat intelligence- Offensive security

Experience

1. Information Security Manager

   ASML

   Jan 2022 — Present

   Act as security subject matter expert and manage engineering teams to implement security throughout the entire software development lifecycle from ideation to production. Perform in depth technical risk assessments, gap analysis, and threat modeling on a variety of different environments and applications, including cloud/on prem, to assess the overall risk to the business. Ensure compliance to industry standards, such as NIST (CSF) and ISO 27001, through continuous risk review, remediation, and management. Set and manage the security roadmap and strategy based on business needs and requirements. Lead risk mitigation activities and remediation efforts to reduce the overall vulnerability of the organization. Assess and review AI applications from a security and architectural perspective to mitigate and reduce any risks that may be introduced. Conduct architecture security reviews of cloud based applications in Azure and GCP. Provide security requirements for all R&D applications including GenAI applications as they are being developed in the cloud or on prem. Manage and lead incident response activities. Use risk based analysis and reviews to recommend new technical controls and process improvements to further reduce enterprise risk and improve security. Provide risk reports and assessments to executive management to communicate risk and reduce risk profile. Plan and coordinate penetration tests.

Education

• Gavilan College

  Python Programming

• SANS Technology Institute

  SEC537: Practical OSINT Analysis & Automation

  2021

• Cisco Networking Academy

  Cisco CCNA Certification Program, Networking

  2017 — 2017

• West Virginia State University

  Bachelor’s Degree, Criminal Justice

  2017