Brant Kahle

Strategic Security Planning:

• Experience in upgrading CVSS vulnerability scoring systems from v2 to v3.
• Research into incorporating EPSS (Exploit Probability Scoring System) into vulnerability rating systems.
• Scope, Onboard, and Operationalize new tools and processes into existing reporting systems for Compliance and Governance Reporting

Team Leadership and Management:

• Led a team of 6 full-time InfoSec analysts and 2-3 consultants, technical associates, or interns.
• Fostered a culture of continuous learning and professional development.

Threat and Vulnerability Management:

• Conduct regular vulnerability assessments to identify and mitigate risks.
• Monitor and analyze security threats, vulnerabilities, and incidents to protect IT infrastructure.

Zero Day Vulnerability Response and Management:

• Develop and maintain a Vulnerability Response plan to effectively handle Critical vulnerabilities and zero days.
• Coordinate and lead response to such vulnerabilities, including investigation, potential impact, and remediation.

Collaboration and Communication:

• Collaborate with other departments (IT, AppDev, HR, Legal) to ensure comprehensive security coverage
• Communicate security risks and strategies to senior management and stakeholders in a clear and effective manner

Infrastructure Security:

• Conducted vulnerability scans using Nexpose/InsightVM, RiskIQ, Nessus, and Twistlock
• Reported and managed vulnerabilities and coordinated remediation efforts
• Automated security processes and maintained compliance metrics (Tableau)
• Created and maintained SOPs for infrastructure security

Application Security:

• Conducted vulnerability scans using Burp Suite, Checkmarx, and Veracode
• Reported and managed application vulnerabilities and coordinated remediation efforts
• Automated application security processes and maintained compliance metrics (Tableau)
• Created and maintained SOPs for application security

Penetration Testing:

• Managed vendor relationships and scheduled third-party penetration tests
• Automated penetration test processes and integrated reporting into JIRA
• Designed and deployed a Responsible Disclosure portal

Automation/Process Creation:

• Automated time-consuming tasks and created low-code PowerApps applications
• Shared automation knowledge and created shared libraries and knowledge bases

Administration:

• Onboarded and maintained consultant workers and finalized vendor contracts
• Supported internal and external audits

0-Day Vulnerability Response:

• Led and supported responses to zero-day and critical vulnerabilities, including BlueKeep, CISCO, PrintKnightmare, multiple Chrome zero-days, Spring4Shell, and Log4J

• Incident Management - Act as queue manager for the Desktop Engineering team
• Incident Reporting\Performance Analytics – Create reports and run analytics on team performance
• Active Directory Migration – Assisting in migrating the Nuveen AD environment to TIAA
• VDA Deployment\Administration Project– Deployed and Administered software to users requiring the ability to work from home
• Inventory Migration Project – Report on hostnames of all Nuveen machines to be inputted into CMDB
• Executive Support – Prioritized to support high level executives.

• Receive and accurately record details of problems reported to the Service Desk to include status and resolutions to problems
• Successfully troubleshoot, diagnose and resolve Tier 1 & Tier 2 service and support issues
• Create and maintain production support documentation including technical support documents and end user instructions
• Respond to error messages by resolving issue or escalating to appropriate support personnel.

• Work in partnership with clients advising them how to use information technology to meet their business needs
• Meet with clients to determine requirements and define the scope of a project
• Purchase systems where appropriate and then design, test, install, and monitor new systems
• These systems included hardware such as workstations, network devices, all the way to new servers
• Install and Test VoIP solutions as well as cloud managed antivirus solutions
• Implement VPN solutions for clients.