Daniel B. Holzman-Tweed, CISSP, QSA

• CISSP # 27329, awarded December 2001

• NSA IAM certification awarded July 2002

• PCI QSA certification awarded January 2006

• Member of CSI since 2000

• Member of ISSA since 2003

2004 - present:  Jefferson Wells

2001 - 2004:  Sony Electronics, Inc.

• Reduced personnel requirements through secure automation of: virus detection, validation, and response; management of security change requests; corporate credit card transaction clearing; customer and reseller order processing.
• Reduced maintenance costs through consolidation of legacy firewall, proxy, and VPN, and other internet service architectures.
• Provided security awareness and training to business unit IT managers.
• Increased security level through design and implementation of multi-layer network security architectures for regional infrastructures.
• Implemented security and business measures resulting in elimination of web defacements.
• Coordinated corporate anti-virus effort, with operational groups managing distributed LANs, WANs, and NOCs matrixed to report to me.
• Project management and development of security measures for North and South American B2B and B2C architectures; security assessments for regional and partner architectures; development of secure global outsourcing architecture for the enterprise customer call center; and regional security policy development.

1999 - 2000:  Parus Interactive (was Webley Systems), Inc.

• Created the company's initial security policy and procedure structure with minimal disruption of the corporate culture.
• Created corporate internet and extranet services upon separation from the parent company.
• Expanded corporate disaster recovery plan as the company grew.
• Established technical and cultural anti-virus defenses.
• Implemented Network Intrusion Detection Systems.
• Designed and implemented multi-layer security architecture for corporate and production networks.
• Successfully promoted security consciousness among the firm's employees.
• Administer security services such as firewalls, PKI, and VPN.
• Conducted physical, host, and network security assessments.
• Provided incident response and forensic analysis of security events.
• Researched emerging technologies and identified opportunities for the company to improve its security.
• Report state of security to senior management.

July 1996 - November 1999: Goldman Sachs (was The Hull Group)

• Planned and supervised a secure data-center expansion conducted with total invisibility to our customers.
• Perform Y2K compliance projects for security and e-mail system audits and remediation transparently to the users.
• Implemented migration of corporate e-mail to an SEC compliant solution.
• Developed an 8-hour recovery plan.
• Designed, installed and administered electronic trading systems between Hull and various counterparties throughout the system's entire life-cycle.
• Project management of Y2K compliance project auditing production trading systems and code-base.
• Enforced corporate acceptable use policies.
• Administered network security architecture.
• Provided incident response and forensic analysis of security events.
• Mentor junior systems administration staff.

April 1995 - June 1996: G-Bar Limited Partnership

• Designed and performed a complete redesign of the network, migrating from Thinnet to Twisted Pair wiring, and upgrading obsolete network hardware.
• Designed, installed, and administered the company's Internet connection and firewall security system.
• Specified architecture for remote access systems for developers and support personnel.
• Administered a Macintosh, PC, and Sun WAN and LAN to meet or exceed the uptime requirements of live options trading.
• Performed server and network monitoring and capacity planning.
• Managed network security services.

August 1993 - April 1995:  Practi-Col Services

• Planned and performed migration from a single-server to LAN architecture.
• Implemented EDI procedures, cutting revenue collection times and overhead costs.
• Designed and installed distributed computing architecture and procedures permitting account managers to use their PC workstations tools such as Excel and Paradox, for better reporting, analysis, and presentation capabilities than provided by the database server application.
• Administered the firm's core business, a medical billing database.

May 1991 - December 1992: Fermilab

Organize, create and distribute over 100 software libraries (including ongoing upgrades) to the D0 experimental collaboration (over 30 laboratory and university VAX and Unix nodes worldwide). Manage security of the libraries. Provide helpdesk and system administration support for local users. Supervise library distribution operators. Key accomplishments include rewriting the distribution software for increased efficiency and ease of later modifications.