Last Chance for a MacBook Air or $650 Off with SANS Online Training - Ends August 3

Mentor: Bios

Mentors are highly qualified, experienced professionals who make themselves available in your local area to help you learn the course material and get certified. Each Mentor is hand-selected from students that have completed their relevant GIAC certification with scores of 85% or higher.

Baker, Chris
Chris Baker is a Director in the IT Security Services group at GlaxoSmithKline where he leads the services that deliver the IT controls that protect the company's network, servers, web and mobile applications, and data. He has led many incident response and vulnerability remediation efforts and has been working for over 20 years in the healthcare industry to promote information protection and IT security. Chris is an active member of the information security community and looks for every opportunity to both learn and encourage others to gain a deeper understanding of the fascinating and often intimidating world of information security. He knows that striking the best balance between security and usability depends on having a clear understanding of the risks that vulnerabilities and threats pose to the business and being able to articulate those risks to senior business leaders. Chris regularly takes part in security training, conferences such as Shmoocon and BSides DE, and capture-the-flag challenges to apply and grow his skills and understanding. Chris earned his MBA from Drexel University with concentrations in both Management Information Systems and Corporate Finance and holds several professional and security certifications including GPEN, CISM, and a Six Sigma Black Belt. https://www.linkedin.com/in/cwbaker
Beatty, James


James has been involved in technology since the mid 80s, and has provided security leadership over the past decade in a variety of environments from education to health care and retail, from medium to large enterprise.
 

Borso, Serge

Serge Borso is the owner and principal consultant of SpyderSec and a SANS Community Instructor. He is an active member in the information security community and has consulted with dozens of organizations to improve their security posture. He has previously developed enterprise vulnerability management programs, created security awareness training solutions and worked to implement a transparent biometric security system for over one million unique online banking users to help combat fraudulent transactions. Currently Serge leads penetration testing engagements and is responsible for the vision, strategy and product/service offerings of SpyderSec.

Serge has lead a number of private training events and presents regularly at public speaking engagements; with the SANS Institute he teaches SEC542: Web Application Penetration Testing and Ethical Hacking. Serge earned his Master's Degree in Computer Systems Security from Colorado Technical University and holds several security certifications including: CISSP, GPEN, GCFA and GWAPT.

http://www.sergeborso.com/

Boyles, Tim

Tim Boyles is the Security Administrator for a Dallas based security company. He brings over 19 years of experience in the IT field. He has worked for the U.S. Navy, a network consultancy, and various other industries, always involved in networking and security.

He has been involved in security architecture, regulatory compliance, intrusion detection, penetration testing, vulnerability assessments, web application security assessments, and uses many security tools over the course of his work.

Cardosa, Mike

Mike Cardosa is currently the Assistant Vice President of Information Security and Risk Management at The Church Pension Group. His experience includes information security, systems administration, technical architecture design, and business process engineering. Prior to working at CPG, Mike was a consultant at Accenture where he worked on projects for both the US Department of Treasury and Columbia University. He has multiple GIAC certifications as well as the CISSP. He developed and maintains Winquisitor, an information gathering tool for MS Windows, for which he earned his GCIH Gold certification. Mike holds an MBA from the New York University Stern School of Business and a BS from Georgetown University.

Curtis, Michael

Michael A. Curtis (Mike) has over 20 years of experience in the security field and has held several key leadership positions at Rollins, Virtual IT Experts, this.com and BellSouth.net. Additionally, Mike is active in the security community having served as a past member of the Symantec Customer Advisory Board, and is an officer in the Atlanta (ISC)2 Chapter. Mike holds a BSEE, cum laude, from Northeastern University, an MBA from Bentley College and a CISSP.

Druin, Jeremy

Jeremy Druin works as an internal pen-tester, incident responder, and defect-remediation expert for a multi-national transportation logistics company. Other responsibilities include web vulnerability assessment operations, setting application and database security standards, creating developer training programs, and teaching developers how to architect, design and write secure applications. Additionally Jeremy develops the open-source Mutillidae 2.x training environment and consults on web-application security topics. As the Director of Education for the Kentuckiana ISSA chapter, Jeremy presents on web application pen-testing and remediation along with operating the "webpwnized" YouTube video channel. Jeremy has a Bachelor in Computer Science from Indiana University and is a GIAC-certified Network/Web Application Pen-Tester and Exploit Developer.

Elovitz, Steven

Steve Elovitz is currently a Manager within Mandiant's security consulting team. Mr. Elovitz has a broad range of experience in the industry and has delivered both proactive and reactive services to government and commercial clients. Steve has significant experience in IR, forensics, as well as penetration testing. Steve graduated from Pennsylvania State University with a BS in Information Science and holds multiple certifications including: GREM, EnCE, CEH, and CISSP. Throughout his career, Steve has gained experience as a sysadmin, a developer, and as both a red team and blue team analyst. 

Hadder, Allen


Allen Hadder has been in the IT field for over 20 years. Most of his 20 years of experience has been as a consultant for small to enterprise businesses in the financial, retail, and education industries.

Allen currently holds the GIAC GSEC and GCIH certification. In past years he has also earned his MCSE, Cisco CNA, Citrix CEA, and VMware VCP.

He also has a passion for teaching and educating people about information security.

http://www.linkedin.com/in/allenhadder

Harris, Mike


Mike Harris is an Information Technology Cyber Security Professional holding certifications as a Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Information Security Professional (GISP), Cisco Certified Network Associate Security (CCNA-Security), Cisco Certified Network Associate (CCNA), Red Hat Certified Technician (RHCT), and Red Hat Certified Systems Administrator (RHCSA). Mike has additional technical certifications which include Digital Forensics Examiner, Network Protocol Analyst, Project+, Linux+, and A+. Mike will soon graduate with a Bachelor of Science in Information Technology Security. Mike is the founder and former board member of TinkerMill, a non-profit organization dedicated to furthering the knowledge of our kids, adults, businesses, and municipalities in the use of high tech with the incorporation of creativity and art. He is also a Red Team Member of the Rocky Mountain Regional Collegiate Cyber Defense Competition. Mike has built a CSIRT from the ground-up, including a secure infrastructure using Linux systems (Red Hat and Ubuntu). Mike has extensive knowledge as a Technology Security Auditor conducting assessments, measuring vulnerabilities, security posture on internal and external networks, and account activities for insider threats and abuse.
 

Helin, Matt
Matt Helin has over 10 years experience in the IT and data communications field. He is a former network and systems engineer who has shifted his primary focus to all things information security for the past few years. He holds the CISSP and GCIH certifications and currently works in the information security department for a high profile e-commerce company. Matt is excited to mentor SEC 504 because it is generally a person's first exposure to common hacking tools. Witnessing first hand how systems are breached can be amazing, alarming, and eye opening.
Kelly, Shawn
Shawn has over 17 years in the field of IT and 10 specifically in an Information Security role. Currently Shawn has taken a position as the Information Security Officer at the University of California School of Medicine. In this role Shawn is responsible for building a robust security program to meet the needs of both educational and healthcare requirements. His responsibility is to implement the policies, standards and procedures to build the framework for this security program. Once the framework is in place his responsibilities also deal with building a security team and implementing technologies and best practices to support this security program. Throughout his career Shawn has had the opportunity to implement many security programs and technologies including encryption, next generation firewalls, IPS/IDS systems, vulnerability management and data loss prevention. Shawn holds many industry certifications including the well known CISSP, GSEC and GCCC. Shawn is always continuing his education and will be taking many more SANS and other security courses. Shawn is excited to have the opportunity to get more in touch with the individuals that are in the security industry near him. He looks forward to being able to pass along some of his experiences and lend a helping hand to the next generation of security professionals.
Kinder, Jason
Jason Kinder has over 17+ years of experience in the IT and InfoSec industry working in the private sector as a network administrator, network engineer, and then moving to manage a distributed IT group before making the jump over to InfoSec. The jump over to InfoSec has put him in a position to manage InfoSec Operations for a multi-billion dollar defense contractor battling some of today's shared adversaries. Through the course of his career his has gained the MCSE and CNE certs back in the day and worked hard recently to achieve the CISSP certification and more recently his GCIH. Backed by a breadth of technical skill and knowledge, it also takes some keen business sense and acumen to properly navigate today's corporate environment. While working in IT, Jason earned a Bachelor's of Science Degree from Wright State University in Dayton, OH in 2001 followed by an MBA with a concentration in Management, Change and Innovation also at Wright State University in 2009. The technical and business skills he has amassed over his career are key to being successful and properly understanding today's security landscape and how it impacts the business. Jason is very excited about the opportunity to Mentor SEC504 as a way to give back to the community, broaden people's minds, and training the InfoSec staff of tomorrow. The challenge is here and now with adversaries evolving and regularly knocking on our doors. Jason will help students be better prepared to identify and deal with these challenges on a regular basis.
Knaffl, Bill

Bill has a Bachelor?s of Science in Criminal Justice from the University of Alabama Birmingham and a Master's of Science in Technical Management from Embry Riddle Aeronautical University.  Currently he is working on his Masters of Science in Information Security Engineering through SANS Technical Institute and has numerous certifications through SANS.  Bill began his career in computer technology in the early 1990's while working at the University of Alabama Birmingham. There, he learned many of the widespread platforms and operating systems, employing computer troubleshooting and virus removal skills. He has been employed with Northrop Grumman for 17 years, during which he has performed several roles including desktop support, client engineering, systems engineering, and most recently information security.

Lee, Travis

Travis Lee is the Director of Penetration Testing at AppSec Consulting with over 11 years of experience in Information Security, Network and System Administration, and System Architecture. He has expertise in many areas including network and web application penetration testing, mobile and client application penetration testing, security management and operations, vulnerability research, cyber-physical systems, and conducting technical training. He has discovered and responsibly disclosed numerous vulnerabilities in commercial software, web applications, and cyber-physical control systems.

Travis is a Computer Science graduate of the University of Hawaii at Manoa and holds numerous professional certifications including the prestigious GSE, OSCE, OSCP, GXPN, GREM, GPEN, GCIA, GCIH, GCFA, GSNA, GSEC, CISSP, and MCSA. Additionally, Travis has achieved the distinctive title of SANS Cyber Guardian (Red Team). Travis is also a Cyber Warfare Officer for the Air National Guard and part of a leading, nationally recognized Cyber Operations unit that conducts worldwide, full spectrum network security operations to improve the DoD Global Information Grid and the Air Force's network security posture. Prior to joining AppSec, Travis worked in the utilities industry and higher education.

Twitter: @eelsivart

LinkedIn: https://www.linkedin.com/in/travisklee?

Luongo, Roy
Roy Luongo is a cyber professional with over 15 years experience. As a CNO operator, Roy has performed offensive cyber operations and adversary emulation for the federal government for many years. He served as a technical director for interactive operations and the Chief, NSA Red Team. As a SME for the United States Army and the Department of Defense(DOD) he has developed thousands of cyber professionals through direct training and workforce design used throughout the DOD and other Federal organizations. Mr. Luongo holds two Masters Degrees in Information Management and Cyber Security Additionally, he holds CISSP, GCIH, GPEN, GXPN, GAWN, and GMOB certifications. He has worked with local high schools to mentor teams to the final rounds of both the Cyber Patriot and Maryland Cyber Competitions and is an avid promoter of cyber skills in middle and high school curriculums. Mr. Luongo has also served as a member of the Center of Academic Excellence, Cyber for the Department of Defense, working with Universities and Colleges to expend curriculums and degree programs in Cyber Security and Cyber Defense. Roy enjoys working with like-minded individuals and mentoring for the SANS Institute, allows him to experience the growth of cyber in a small group collaborative setting. Mentorship allows him to give back to a community that has given him so much.
Martin, Matthew

Matthew is currently the

manager of Infrastructure Vulnerability Identification at a Fortune 100 financial services institution. In his role, his team is responsible for rating and scanning for vulnerabilities. In previous roles, Mr. Martin has been responsible for building and running a security metrics program, leading a standards and policy redesign, served as a liaison to internal audit, and was a data in motion and data in use subject matter expert.

Matthew has an MS in International Economics from Valparaiso University and attended MBA school at UNC-Charlotte; as well as completed a certificate course at Harvard University in Leadership Communications. He currently holds the GSLC certification. Find Matthew on LinkedIn at www.linkedin.com/in/mattmartin and follow him on Twitter @MattMartinGFT and also at www.betterinfosec.com
 

Peterson, Lisa

Lisa Peterson CISA, CRISC, CISSP has worked in Information Security for 20 years, and is a Security Analyst for Progressive Insurance. Her current focus is in governance, risk and compliance. She is a part-time instructor at Cleveland State University and also speaks on security topics. She serves on the board for the Information Security Summit, the Northeast Ohio chapter of ISACA, and the Northeast Ohio chapter of CSA.

Petsche, Don


Don has worked in information technology for over 20 years holding certifications including CNE and MCSE. He is GSEC and GCIH certified and anxious to assist anyone looking to further their knowledge of security essentials. Don has worked in the fInancial industry, followed by a brief period in retail, then spent a little over a year working with the founders of a very well known Independent Consultants Exchange. While independently contracting, Don has worked in multiple states on government identity and health related projects. Don now works as a technology specialist leading a small team of government infrastructure specialists. He holds the title of Chief Information Security Officer at a state health department among other duties as assigned. In addition to his work at the state department, Don works part time with a team of dedicated enterprise security professionals managing SIEM deployment.
 

Robinson, Christopher

Chris Robinson graduated from the United States Naval Academy with a B.S. in Computer Science and served over 6 years in the United States Navy.  He then began his IT security career as a consultant for Booz Allen Hamilton.  Chris then attended graduate school full time at San Diego State University earning a M.S. in Computer Science.  Following graduation, Chris worked as Computer Scientist for the Navy and was an Adjunct Professor at San Diego?s Mesa Community College.

Chris then transitioned into ICS security and is currently a Senior Security Consultant for Cimation in Houston, TX where he regularly works on ICS cybersecurity projects in the Oil and Gas Industry.  Chris has learned first-hand the unique requirements and operational constraints for securing ICS environments.  Chris has obtained the CISSP and GICSP certifications and attended several SANS and industry conferences, although the SANS conferences are always the best.

LinkedIn Profile: http://www.linkedin.com/in/chrisrobinson98/

Romero, Steven

Steven Romero is a 20-year technical professional with experience in IT operations, ICS engineering, project management, & training. Steven is passionate about information security, and is a strong advocate and beneficiary  of the SANS hands-on approach to learning. Please join Steve and thousands of other InfoSec professionals who have advanced their knowledge and career through the SANS training and certification program.

Seiler, Heather
Heather was fortunate enough to enter IT at a time when the only prerequisite for a job was the ability to turn on a PC. Starting on a helpdesk, she worked her way up through systems and network administration, finally stumbling into information security after being told her job responsibilities suddenly included firewall log review. In 2006, Heather received her Masters in Information Assurance from Norwich University and has since earned several SANS certificates and her CISSP. Heather currently works as an information security architect for an international tire distributor after experiencing such diverse industries as insurance, accounting, real estate, banking, and healthcare. She loves helping people learn and is excited to have the opportunity to teach!
Thomas, Sean

Sean Thomas has over 20 years of Information Technology experience in Higher Education during which he has been involved in various aspects of IT including desktop support, networking, academic systems administration, and Windows & Unix/Linux server administration.  For the past several years, Sean has been focused on IT Security and is currently a Senior Information Security Analyst with the world's largest, fully accredited university specializing in aviation and aerospace. He was an integral part of the development of the Security Services team at the University.  As part of this team, he has led initiatives in support of academic research, student services, and policy development.  He has experience with IDS/IPS, firewalls, packet analysis, vulnerability scanning, forensic analysis, and security assessments.  Sean is also part of the SANS OnDemand QC team.  Sean has a Bachelor of Business Administration in E-Business Technology, has held MCP and RHCT certifications, and currently holds several GIAC certifications including GCED, GCFA, and GCIH.

https://www.linkedin.com/in/seanadamthomas

Vedaa, Charles


Charlie Vedaa has more than a decade of security operations and engineering experience. He holds several GIAC certifications, including the prestigious GSE. Charlie has a background in network engineering and has been a CCIE since 2001. He's also presented at top security conferences, including DEF CON, Summercon, and HOPE.

https://www.linkedin.com/in/cvedaa

Vest, Joe

Joe Vest has worked in the information technology industry for over 17 years with a focus on red teaming, penetration testing and application security.  As a former technical lead for a DoD red team, he has extensive knowledge of cyber threats and their tools, tactics and techniques, including threat emulation and threat detection.  Joe is the co-founder of the security consulting company MINIS LLC, providing innovative solutions for the mitigation against an ever-changing cyber threat.  As a leading security professional, he has achieved numerous security certifications: OSCP, CISSP-ISSMP, CISA, GPEN, GCIH, GWAPT, CEH, Security+

Voorhees, James

Jim Voorhees was named MSISM Program Director of SANS Technology Institute (STI) in November 2011. A graduate of STI, Dr. Voorhees has had a varied career in government and private industry. He earned his Ph.D from the Johns Hopkins School for Advanced International Studies after earning degrees in International Affairs from the George Washington University and working on the editorial staff of the International Food Policy Research Institute. After writing a book for the Kettering Foundation (Dialogue Sustained) and experience with Kettering, the Congressional Research Service, and IREX, Dr. Voorhees entered the IT industry as a technical writer, he quickly moved on to systems administration, then IT security and SANS. He has worked on security at several government agencies, including the FBI and the IRS, and currently works for Sage Management as a Network Security Engineer on a DOD contract.