Summary
Overview
Work History
Education
Skills
Additional Information
Timeline
Generic

Zachary Wilson

Sr. Sales Engineer
Yukon,OK

Summary

Dedicated Sr. Sales Engineer with over 23 years of experience in Cybersecurity. Excellent reputation for going above and beyond by working tirelessly on the customer's behalf to understand what matters most to their business, quickly identify and resolve issues and provide an all-around superior customer service experience.

Overview

26
26
years of professional experience
7
7
years of post-secondary education

Work History

Cyber Security Director

Capital One
Plano, Texas
04.2024 - Current
  • Evaluated emerging technologies for potential integration into existing security infrastructure, staying ahead of evolving threats.
  • Oversaw the deployment of enterprise-wide security solutions, reducing vulnerability to cyber threats.
  • Conducted regular audits to ensure compliance with industry regulations and standards, maintaining a strong security posture.
  • Led incident response efforts during high-profile breaches, containing damage and swiftly recovering operations.

Sr. Sales Engineer

Orca Security
Oklhaoma City, OK
09.2021 - 04.2024
  • Collaborate with Enterprise and Mid Market Sales team to plan and implement sales strategies to win business
  • Provide pre-sales support for opportunities and POC (proof of concept) processes
  • Deliver technical presentations to new potential customers
  • Demonstrate subject matter expert level understanding of the entire Orca Security Platform
  • Provide support and talks at vendor-sponsored events, trade shows, and user group meetings
  • Winner - September 2022 "Most New Logos" sales contest by signing 7 new customers in one month.
  • #1 SE for Tech-Wins in 2022 with 21 to-date
  • #2 SE for Closed Wins YTD in 2022 with $1.5M
  • Leveraging my 20+ years of practitioner experience to augment the customer's security team by using Orca to deliver highly-customized, in-depth risk assessments as part of every PoC
  • Demonstrated a 5-to-1 PoC Won-to-Lost ratio in 2022 by driving exceptional customer engagement experiences through the use of short, personalized videos instead of email

Specialist Solution Engineer

VMware Carbon Black
Oklhaoma City, OK
12.2019 - 09.2021
  • Present VMware Carbon Black vision, strategy and product roadmaps to executives and technical management
  • Work with the sales team to qualify sales opportunities in terms of customer technical requirements, competition, decision-making process and funding
  • Partner with the sales team to develop and implement account strategies to drive the adoption of
  • VMware Carbon Black solutions within strategic accounts
  • Present and advocate for the design and value of the proposed VMware Carbon Black solution and business case to customers and prospects
  • Participate in account planning and drive POCs to meet the customer's success criteria.

Information Security Engineer

Tapstone Energy
03.2018 - 12.2019
  • I use my 19+ years of information security knowledge and expertise to function as a full-service IT Security team
  • As a risk analyst, I periodically conduct baseline risk assessments of the organization against the NIST
  • Cybersecurity Framework
  • Assessment findings have been leveraged to identify and deliver effective, risk-appropriate solutions
  • As an IT governance and audit liaison, I work with the business, internal and external auditors to draft and refresh the Information Security Policy, design and test security controls in accordance with SOX section 404 and remediation of findings associated with control testing
  • As an network security engineer, I am responsible for designing and maintaining complex networks
  • Some of the devices I've installed, configured and supported include: Palo Alto Next-Gen
  • Firewalls, Global Protect VPN, Load Balancer (F5 and Citrix Netscaler) and Cisco Umbrella/OpenDNS
  • As a vulnerability management and remediation analyst, I am responsible for installing, configuring and maintaining the Rapid7 Insight VM vulnerability management platform
  • I am also responsible for working with various coworkers on vulnerability remediation and reporting
  • As an identity and access management analyst, I am responsible for configuring and maintaining a hybrid-Active Directory environment, Active Direction Federation Services (on-prem and Azure) and
  • Active Directory auditing and alerting
  • I am also design and implementation of proactive user and computer controls via global policy
  • As an email security analyst, I am responsible for the company-wide migration from on-premise
  • Exchange servers to Office 365 Exchange Online
  • This included designing, implementing, tuning and monitoring of ATP and EOP anti-phishing, anti-spam, mail flow and anti-malware policies
  • As a security operations analyst, I am responsible for designing and implementing end-point logging configuration standards, log ingestion, dashboard creation, alert tuning and incident response using the
  • Cybraics NLighten 4.0 Platform
  • As an endpoint security engineer, I am responsible for the installation and maintenance of Cylance
  • Protect across the organization
  • I am also responsible for the implementation and operation of the
  • ManageEngine MDM solution for mobile devices
  • I am also responsible for endpoint OS patching via configuring, updating and maintaining the MS WSUS environment
  • As a cloud security engineer, I am responsible for secure network connectivity between the corporate network and AWS VPC, EC2 configuration hardening, log collection and monitoring with CloudTrail and
  • CloudWatch and Security Group configuration, implementation and monitoring.

Sr. Manager - Information Security

Capital One
Plano, TX
10.2016 - 03.2018
  • Develop lasting partnerships with Line of Business and Technology teams, to include collaborating on security communications, assessments, analysis and risk-based views of controls maturity
  • Serve as a PCI-DSS expert for the Capital One Financial Services division
  • Partner closely with the
  • PCI COE, providing specialist knowledge and actionable PCI DSS guidance to the Lines of Business and
  • Technologists as it relates to current and future processes, applications, documentation and products as early as possible into project life-cycles
  • Perform detailed assessments of company processes, applications, documentation and products for alignment with the PCI DSS, identify gaps, develop recommendations to close gaps in alignment with organization and project goals, and communicate detailed and summary results professionally
  • Stay current with architecture and technology developments and competitive trends, and use this knowledge to identify and propose creative security and compliance strategies to Lines of Business and
  • Technologists
  • Promote awareness and training of PCI principles, requirements and security best practices
  • Coordinate and execute proactive Information Security consulting to the business and technology teams covering Infrastructure Security, Disaster Recovery, Management of Data, Network Architecture and Design, User Access Management, and Management of Third Parties
  • Serve as an expert in Capital One's Information Security offerings, policies, procedures and standards
  • Influence customers to leverage security offerings and escalate to management when you have concerns
  • Provide ad hoc support on special Information Security hot topics for the business
  • Work with that leadership to anticipate their objectives and needs to better server them
  • Drive innovation activity as an outcome; Partner extensively with the Security Engineering organization to derive both novel and patent activity as outcomes from research and development or from security engagements

Sr. Information Assurance Engineer

Boeing
Oklahoma City, Oklahoma
02.2016 - 10.2016
  • Supporting the Japan E-767 AWACS program
  • Determined systems security requirement and architecture definition for the mission computing system
  • Identify, evaluate and document computing system requirements as well as estimating, planning and scheduling overall tasks
  • Lead and independently contribute activities to architect, design, build, and test delivery systems/ components
  • Developed the Japan E-767 AWACS Mission Computing Security Architecture Description document for the aircraft
  • Executed analyses and trade studies and engineering risk assessments
  • Supported software assurance testing with Klocwork, including verification and validation
  • Designed, built and tested delivery systems and components
  • Evaluated product usability, affordability, functionality, security and performance to assess suitability for integration into delivery system environments
  • Provided technical support and consultation for the implementation and usage of delivery systems
  • Lead junior members to identify, evaluate and document complex system requirements.

Sr. Manager - Information Security

Seagate Technology
Oklhaoma City, Oklahoma
07.2013 - 11.2015
  • Lead a team of 9 security architects charged with maintaining a secure enterprise environment by providing security architecture and compliance services utilizing technological and governance leadership, security principles, policies, standards and risk management
  • Experience using the latest TOGAF framework to enable the organization to effectively address critical business needs by ensuring that everyone speaks the same language
  • Helping the organization to avoid lock-in to proprietary solutions by standardizing on open methods for Enterprise Architecture
  • Created, implemented and supported the electronic security incident and response program based on
  • NIST SP 800-61 Rev
  • 2
  • Performed security architecture assessments based on a proprietary 7-layer architecture assessment model
  • Performed security risk assessments using NIST SP 800-30 and SP 800-37 frameworks
  • Conducted Kepner-Tregoe decision analysis reviews for both on premise and cloud-based technology solutions
  • Served as a senior-level security advisor for corporate IT, branded solutions and cloud services organizations
  • Served as a senior-level security advisor for Sarbanes-Oxley, HIPAA and PCI compliance efforts
  • Selected providers for and managed yearly 3rd-pary penetration testing engagements which included external network, wireless security and social engineering testing
  • Conducted IT security awareness campaigns which included printed materials and social engineering exercises using external PhishMe services
  • Created a business case for and implemented an Offensive Security Unit/Red Team using sophisticated system security tools to determine how well the organization actually implemented security safeguards
  • Created and managed yearly budgetary responsibilities.

IT Enterprise Applications Staff Engineer

Seagate Technology
Oklhaoma City, Oklahoma
01.2012 - 07.2013
  • Provided SME-level support for Enterprise Data Integration technology stack
  • Responsible for the creation and execution of both technical and strategic Enterprise Integration roadmaps
  • Responsible for SOA orchestration throughout the Enterprise
  • Responsible for the development and execution of Seagate cloud integration strategy.

IT Security Manager

Seagate Technology
Oklhaoma City, OK
01.2007 - 04.2011
  • Managed up to 13 direct, contract and off-shore security engineers charged with developing, articulating and implementing the global security operations strategy and roadmap for the Seagate Business Data
  • Centers
  • Business Data Center lead for the implementation of Section 404 of the Sarbanes-Oxley Act of 2002 (SOX 404)
  • Sponsor and drive an effort to design and implement a secure infrastructure based on various technology standards adopted by Seagate's IT Security group
  • Conduct Information Security and Business Risk Assessments an accordance with ISO-17799, an internationally recognized security process standard
  • Ensure information security requirements are considered within new product and service development efforts
  • Communication and coordination of security issues, programs, projects, and enhancements through a multi-functional Data Center Security Operations team
  • Promotion of security awareness and education throughout the Data Center organizations
  • Manage technical project members in a matrixed, decentralized environment and has direct management responsibility for technical staff
  • Responsible for host and database configuration management
  • Established a function-based baseline standardization process and concentrated intently on driving down issues being reported by our compliance auditing software
  • Core team member on various technology selection and implementation projects
  • Used Kepner-Tregoe decision analysis techniques to evaluate and score requirements
  • Served as the Electronic Security Computer Security Incident Response Team (CSIRT) lead, responsible for computer security incident identification, classification, analysis, assignment, containment, mitigation, eradication and reporting.

Sr. Systems Administrator

Seagate Technology
Oklhaoma City, Oklahoma
06.1999 - 12.2006
  • Solaris/Unix system administration, responsible for 500+ Solaris/AIX/Linux hosts with priorities ranging from Mission Critical to Department Important
  • Worked with a great team to administer Microsoft Windows 2003 Servers and deploy Active Directory
  • Forests - Migrated hundreds of NT4 Domains
  • Setup Root and Domain DCs, enabled HPOV and SiteScope heath monitors, documented the support escalation process, drafted L1 Troubleshooting Guide and provided training as required
  • Assumed leadership role of the AD core team in Sep
  • 2006
  • Setup the first DC BIGIP Controller pairs and helped mature many of the DC standards that are still in use today
  • Network traffic/packet analysis skills for those hard to find problems
  • Responsible for Host and database configuration management
  • We established a function-based baseline standardization process and concentrated intently on driving down issues being reported by our compliance auditing software, Symantec ESM
  • Managed host-based intrusion prevention/detection projects for global DC resources
  • Participated in Network based intrusion prevention/detection project
  • Provided my requirements, evaluated and scored 6 alternatives
  • Legato Networker administration
  • In a pinch I was able to pull out the Networker documentation and successfully execute many backup related operations, including: restored backups, loaded tapes, backed up data to tape
  • This was not really part of my job but I had to get done and sometimes the "back up" guy wasn't there
  • SunONE Directory Server administration
  • Help maintain a SunONE Directory Server
  • We take care of backups and upgrades and we work with developers when they're testing code
  • Shell scripting and HTML programming, used mostly to automate processes and redundant functions
  • Global Netegrity Siteminder administration
  • With great help from the team at Seagate, I was able to manage an internal and external Policy Server Environment, spread across North America and Singapore
  • Project management - Global Scale, SiteMinder, Active Directory, original ESM roll-out.

Education

Master - Business Administration

Southern Nazarene University
Bethany, OK
02.2004 - 11.2005

Bachelor's - Management Information Systems

University of Central Oklahoma
Edmond, OK
06.1994 - 12.1999

Skills

Certified Information Systems Security Professional (CISSP)

CISSP-ISSAP

CISM - Expired

CISA - Expired

Security Regulations & Compliance

Risk Mitigation Strategies

Security Consultation

Interpersonal Communication

Integration Platform as a Service

API & Web Security

IaaS Security

SaaS Security

Additional Information

  • Authorized to work in the US for any employer

Timeline

Cyber Security Director

Capital One
04.2024 - Current

Sr. Sales Engineer

Orca Security
09.2021 - 04.2024

Specialist Solution Engineer

VMware Carbon Black
12.2019 - 09.2021

Information Security Engineer

Tapstone Energy
03.2018 - 12.2019

Sr. Manager - Information Security

Capital One
10.2016 - 03.2018

Sr. Information Assurance Engineer

Boeing
02.2016 - 10.2016

Sr. Manager - Information Security

Seagate Technology
07.2013 - 11.2015

IT Enterprise Applications Staff Engineer

Seagate Technology
01.2012 - 07.2013

IT Security Manager

Seagate Technology
01.2007 - 04.2011

Master - Business Administration

Southern Nazarene University
02.2004 - 11.2005

Sr. Systems Administrator

Seagate Technology
06.1999 - 12.2006

Bachelor's - Management Information Systems

University of Central Oklahoma
06.1994 - 12.1999
Zachary WilsonSr. Sales Engineer