Jen Greulich

Co-Founder/Chief Operating Officer

Legato Security · Greater Salt Lake City Area

Present

Legato Security is a managed security service provider (MSSP) that specializes in a staff augmentation approach to providing cybersecurity services. Unlike many MSSP's, our team focuses on partnership and becoming an extension of our client's IT and Security teams. This allows us to really learn and understand the environment, determine which alerts, events, or vulnerabilities may be priorities, tune false positives and noise, and allow clients to focus on other business priorities. We are technology agnositc and have a wide variety of service offerings including: SOCaaS SIEMaaS Endpoint Protection Platform Administration Vulnerability Management Risk Assessments Managed Compliance Third-Party Vendor Risk Management Firewall & Network Administration Security System Optimization and Administration

Director, Managed Security Services

GRA Quantum · Greater Salt Lake City Area

Manage and develop the Security Operations Center and Managed Security Service offerings. Hire and supervise SOC staff, develop and maintain strategic partnerships, and develop and maintain client onboarding and Managed Security Service program needs. Maintain budget and overall strategy of the service offerings, research and support new products, and develop the technical expertise amongst staff needed to support client needs. Interact directly with clients to provide security roadmaps, strategy, and helping to determine customer's needs and how our solution can align with those needs. Cultivate client relationships and channel partnerships. Participate in market research, business development, and sales engineering efforts.

Sr. Manager, Business Operations Protection (Cyber Security Operations)

Vivint Smart Home · Provo, Utah

Responsible for management of Security Operations Center and other cyber operations. Manage SOC staff, evaluate program and make changes to adhere to security best practices and reduce overall risk. Focused on managing, building, and strengthening security analytics, threat monitoring, incident response and alerting, and managing and evaluating technologies for IDS, email filtering, vulnerability management, and SIEM. My team performs security evaluations and works with other organizational units to close security holes, implement best practices, and strengthen the overall security posture of the organization. Report to Chief Security Officer and make recommendations for program enhancements and administration. Responsible for incident detection and response. Responsible for interfacing with strategic partners and vendors for strength of SOC maintenance and operations. Responsible for implementing policy, procedure, and standards as well as to assist with risk governance, compliance, and auditing.

Manager, It Security & Compliance

Charlotte Russe · San Diego, California

Responsible for management and administration of security and compliance program and staff. Oversee all compliance and regulatory audits. Interface with vendors and make security program decisions for solutions, vendors, and policy and procedures. Provide backup operational support for security related tasks.

Senior Security & Compliance Analyst

Charlotte Russe

Responsible for monitoring, analyzing, and interpreting security/system logs for events, operational irregularities, and potential incidents and escalating issues as appropriate. Responsible for administration and operational support of all security monitoring and management systems. Responsible for monitoring all network traffic and performing network intrusion detection/ prevention monitoring. Periodic review of firewall rules and access control lists. Responsible for consulting, advising, and approving secure network design and architecture. Responsible for monitoring threat/vulnerability landscape and security advisories. Perform threat/vulnerability assessments and periodic internal/external vulnerability scans on inventory of corporate assets to evaluate the security configuration of systems. Recommend appropriate measures to remediate vulnerabilities such as patching; implementing controls to mitigate risk; and ensuring secure configuration of systems. Perform periodic port scanning to search for remotely accessible network ports and services that are vulnerable to exploitation and identifying any new unauthorized listening network ports. Maintains an asset inventory of hardware/software/systems/network devices and documenting configuration standards for each. Ensure and implement secure configuration, security hardening, and policy compliance of all assets. Responsible for secure configuration of authorized hardened wireless clients, wireless access points, IPS sensors, and handheld devices. Performs IT audits, security reviews, risk assessments, Change Management reviews for SOX, PCI, HIPAA, and C-TPAT, IT control mapping, process documentation, control testing, deficiency remediation, gap analysis/assessments, and IT audit preparation. Lead the documentation of Standard Operating Procedures and System Configuration Standards. Responsible for the Information Security Awareness Program. Ensure staff and systems are in compliance.

Information Technology Security Analyst

Port of San Diego

This position is similar to a traditional Information Systems Security Officer (ISSO). Remain informed of security risks and implement various mitigation solutions for security risks. Encourage and facilitate cyber security awareness amongst employees. Administration access control systems. Perform vulnerability scanning and coordinating the disbursement of critical security patches and advisories. Develop, maintain and enforce IT policies and procedures, security functions, incident response and disaster recovery plans. Administration and enforcement of Internet content filtering and policies, data loss prevention. Project management for security projects. Coordination with other departments to facilitate security initiatives.

Network Systems Analyst

Port of San Diego

Member of the Network/Infrastructure team and the Systems Security team. Primary focus on Public Safety information systems and networks. Support, implementation, and maintenance of enterprise applications. Implement and troubleshoot network infrastructure, and provide high-level support for hundreds of applications, systems, and hardware. On a rotational basis, I provide after-hours support for the Port's law enforcement agency: the San Diego Harbor Police. Frequently, a technical lead and/or project manager on major projects and support of LAN, W-LAN and WAN environments. Provide critical support for other technical leads.

Network Administrator

Platte County Government · Wheatland, WY

My job duties included administration and maintenance of several network and server environments for 15 departments, all with unique needs and requests. I have vast experience in implementing, maintaining and troubleshooting both wired and wireless network equipment. I was required to work with many state agencies to maintain VPN and other firewall connections, and I worked with a wide variety of software and hardware vendors to maintain pricing, support, licensing and maintenance contracts. I prepared and maintained the budget for the department, and I handled purchasing and implementation of all IT-related systems among the departments I worked with. I offered workstation and network printer support, and maintained regular backups of all critical systems. I supported Cisco ASA firewalls, Server 2000 through Server 2008 operating systems, Windows XP, Vista and Windows 7. I also provided 24/7 support to mission critical systems for Dispatch, Corrections and Law Enforcement entities. I provided support for several software systems; some custom software, records management systems, Computer Aided Dispatch, as well as numerous Microsoft applications. I have some training with the UNIX operating system but would like to learn more. The servers I administrated vary from Microsoft Exchange, Active Directory domain controllers, application servers, file servers, UNIX and SQL servers. I supported servers in VLAN and virtualized environments. I also provided hardware support on a regular basis. Because I worked with many different agencies in many different capacities and environments, I also have excellent written and oral communication skills. This job required a very strict confidentiality policy and agreement, which I took very seriously.