RICHARD PAUL Johnson

Managed and integrated cloud security systems for Fortune 500 companies; mitigating attack vectors including DDoS, web application attacks, credential abuse and web skimming.

Plan and migrate customers to zero-trust architectures, across a wide range of cloud and on-premises applictions

Perform security reviews of existing configurations and make recommendations to improve overall security postures.

• Fortune 500 client: CSX CORPORATION.
• Designed, configured and managed vulnerability assessments for a Fortune 500 client; worked collaboratively with application owners to successfully reduce the perimeter exposure by 80%.
• Subject matter expert in penetration testing and vulnerability scanning: technical support for pre-sales, and principal engineer for client engagements including scoping, testing, verification, and reporting of findings and recommendations to senior level executives.
• Developed and implemented web application firewall policies for critical business applications: decreased risk exposure and improved strength in depth strategy.
• Led, planned, co-ordinated Blue/Red team exercises and cyber security training for peers and junior team members.
• Developed new and maintained existing shell and python scripts for automated security operations and incident response tasks: email spam/policy testing, incident response reconnaissance scripts and general linux admin tasks.
• Architected, and planned a successful migration of multiple hardware based Citrix Netscaler to a virtualized, centralized solution: saved costs in hardware maintenance/licensing fees and simplified original design.
• Architected, planned and implemented a successful client migration from Cisco ASA to Checkpoint firewalls, introducing next generation features: improved the overall network security posture.
• Migrated various clients to cloud security solutions from onsite equipment e.g.
• Web proxies and email gateways.
• Improved security posture, reduced admin/support/maintenance costs.

• Manage and monitor multiple enterprise security solutions for a fortune 1000 company.
• UK regional and European client site assessments; network, security, IP telephony and virtualization services.