Dean is an Information Security Specialist with 10 years of experience in providing tailored security services to a variety of clients in the public, healthcare and education sectors. He has worked with these businesses to improve their overall security posture by helping them meet and exceed the standards required for compliance with various regulations such as HIPAA, GLBA and SOX. He is able to deliver these results by using a combination of technical services such as risk assessments, penetration testing and incident response to develop and improve upon existing controls and metrics for clients of zero(day) solutions.

Some of his other roles include that of a trainer. His ability to leverage his technical experience, coupled with his ability to easily communicate concepts and ideas, has allowed Dean to serve as a Local Mentor for the SANS Institute teaching the Wireless Auditing, Incident Handling and Hacker Techniques Tracks.

Some of Dean’s recent achievements:

• Conducted penetration testing of web applications/websites of large university for improper coding and vulnerabilities such as SQL injection, cross site scripting and directory traversal attacks and provided post exploit analysis of compromised websites, including documenting mitigation techniques.
• Conducted wireless network audit and penetration testing of a large university documenting attack vectors and mitigation techniques.
• Conducted penetration testing of internal network for a large university to determine current security posture and to provide mitigation options including developing repeatable security metrics in order to measure the effectiveness of existing controls.
• Developed security policies and procedures for HIPAA compliance for a large healthcare organization.
• Developed Incident Handling procedures and processes for a large university.
• Developed Data Leak Prevention Methodology for a large Risk Management Company.

• Enterprise Wireless Network Assessments
• Penetration Testing and Vulnerability Assessments
• Incident Handling and Response
• Security Policy development and Compliance
• Privacy and Industry Regulation