Hi, I'm Elias
Security Minded Professional
Security-focused professional with 25+ years of experience leading security initiatives, digital transformations, technical sales, and customer success engagements. Adept at aligning security strategies with business goals, providing PreSales technical expertise, driving cybersecurity governance, and leading security teams across multiple domains.
Contact MeAbout Me
My introduction
A problem-solver with strong cross-functional leadership, mentoring capabilities, and a passion for innovation in security. Proven ability to bridge business and technology to drive impactful solutions across various domains.
Hands-on experience in security architecture, risk management, compliance, SIEM (Insider Threat), vulnerability assessment, penetration testing, and advanced cybersecurity solutions. Expert in Security Architecture & Engineering, Threat Intelligence & Incident Response, Governance, Risk, and Compliance (GRC), and Security Operations Center (SOC) Leadership.
Strong foundation in Security Operations with practical experience implementing SIEM solutions. Skilled in evaluating and integrating security tools including SOAR and XDR platforms. Working knowledge of modern security paradigms including Cloud Security, DevSecOps, and Zero Trust architectures, with hands-on experience in Identity & Access Management solutions.
experience
projects
worked
Professional Expertise
Comprehensive Security & Technology LeadershipSecurity Architecture & Engineering
Enterprise Security DesignCloud Security Architecture (AWS, Azure, GCP)
95%Zero Trust Architecture
90%Security Controls Implementation
95%IAM & PAM Solutions
90%Security Operations
Threat Detection & ResponseSIEM/SOAR Implementation
95%Threat Hunting & Intelligence
90%Incident Response & Forensics
85%Security Automation & Orchestration
90%Governance & Compliance
Risk & Compliance ManagementSecurity Frameworks (NIST, ISO 27001)
95%Risk Assessment & Management
90%Security Program Development
95%Technical PreSales & Solution Design
95%IT Operations & Service Management
Enterprise IT & Business SolutionsTechnical Business Analysis & COTS Implementation
95%Network & Systems Administration
90%Service Desk & Technical Support Leadership
95%ITIL & Service Management
90%Application Security & AI
Advanced Security Analysis & AI DevelopmentBinary Analysis & Reverse Engineering
90%Assembly & Buffer Overflow Analysis
85%AI/ML Security & Malware Detection
90%LLMs/RAG & AI Development
85%Technical Skills
Tools and techniques to get it doneCloud and Hosting
More than 25 yearsBare-metal
Self-hosted
Co-location
Azure
GCP
AWS
Digital Ocean
VMware
VirtualBox
Hyper-V
Programming Languages
More than 10 yearsPython
JavaScript
HTML
XML
VBS
Batch
Shell
PowerShell
SQL
Jython
Electron
SDL
KSQL
YARA2
Operating Systems
More than 30 yearsWindows 3.1 - 11
Windows NT
Windows Server 2000-2019
Linux - Ubuntu
Linux - Red Hat/Centos
Linux - Debian
Unix - Solaris
Unix - HP UX
Unix - IBM AIX
Micro Services - Alpine
Database Management
More than 25 yearsOracle 7i-11g
Microsoft SQL Server 6.5-2019
MySQL
PostgreSQL
Consul
Snowflake
Hadoop
MongoDB
Vertica
InfluxDB
Redis
Couchbase
Network Management
More than 25 yearsNetwork Architecture
Dial-up + ISDN + SAT + Ethernet + Fiber
Fault Tolerant / Resilient to Failure
Network Installation
Cisco + Citrix + Netgear + HP
Network Administration
Monitoring + Logging + Auditing
Security by Policy
Firewall rules
NetFlows + IP Routing
Windows GPO
Cloud Security Groups
Network Segmentation
VPN + VLAN + 802.1x
System Hardening
Identity and Access Management (IAM)
Privileged Access Management (PAM)
Windows AD + Azure AD (B2C+B2B)
RBAC + PKI + Least Privilege
SSO + OAuth + SAML + OKTA + WebAuthn
Oracle Identity Manager
NetIQ DRA (AD Automation and Audit logging)
Audit Report Development
Network Services
Backup + Storage + DR
DNS + DHCP + WINS + NNTP + SSH
SAN + NAS + NFS + FTPS + LDAPs
Wifi + Mesh + F5
Kubernetes + Fluent + kube-proxy
TLS + COMSEC + FIPS
Tools and ERP Software
More than 30 yearsMicrosoft O365
Google GSuite
Totango
Workday
Adobe Acrobat
DocuSign
Visio
Excel
PowerPoint
Putty
Notepad++
Security Stuff
Tools and Services to Fight Cyber CrimeDevOps/DevSecOps
More than 20 yearsCI / CD
IaC + Ansible + Terraform + YAML
K8s Security Policies + Tigera
Performance Testing
Distributed Processing
JIRA + Chef + Puppet + CDF
AWS CodeCommit + Beanstalk
GitHub - Git + Actions + Pages
Jenkins + Gitlab + Eclipse + SVN
Lint + Snyk + Fortify
Kubernetes + Docker + Fluent + Kube-Proxy
Kafka + Zookeeper + Spark + Mirrormaker + SOLR
Rest + SOAP API + Flask + NodeJS
TheGrinder + JConsole + Firebug + Fiddler + Browser DevTools
HP QC + HP ALM + SQL Trace + SAMLTRACER
Adobe LiveCycle + HP Loadrunner + Webload
Sysinternals
Apache + Nginx + Tomcat + IIS
JBOSS + Sun Java + Oracle Application Servers
Grafana + Telegraf + InfluxDB
Security Operations (SOC)
More than 7 yearsIncident Management
Incident Response
VirusTotal + URLVoid + OPORA
IPS + IDS + HIPS + HIDS + NgFW
Zeek + Suricata + Snort + Sophos UTM
Imperva WAF
Stakeholder Communication
Sophos Web and Email Appliances
Web and Email Content Filtering
Sophos Endpoint + Microsoft Defender + CrowdStrike Falcon
Entrust ESP + SecurID RSA tokens
Mcafee EPO + Disk Encryption + DLP
Apricorn Aegis USB
Omnipeek + Netwitness + Wireshark + Tcpdump
SDWan + SASE + CASB + EDR + XDR
Security Testing and Detection
More than 15 yearsBurpSuite + Nmap + FFUF + Kali Dist + F12
Android Studio + Rengine + Jadx + MoBSF
WebInspect + Nessus + Qualys + Fortify + Sqlmap
SIEM + Outliers + UEBA + SOAR
Data Source Onboarding + Detection Engineering
Security Data Lakes
EDR + XDR
Big Data
Security Event Analysis + Routing
Security Event Parsing + Enriching
Threat Intelligence + Threat Hunting
Insider Threat Detection + Identity Attribution
HashiCorp Vault
ArcSight Suite + Flex + SmartConnectors
Syslog + CEF + JSON + CSV + Snare + WEC + WEF + Parquet
Qualifications
My personal journeyMaster of Science - Cybersecurity
Remote - University of London (UK)Certified Cloud Security Professional (CCSP)
Ottawa - SelfGoogle Cybersecurity Certificate
Ottawa - CourseraPractical Industrial Control System Penetration Testing 2024
Ottawa - UDemyPCAP Badge
Ottawa - PentesterLabsGitHub Actions for CI/CD
Ottawa - LinkedIn LearningSnowFlake Data Applications, Engineering, Lake, Sharing and Warehouse Badges
Ottawa - SnowFlake USecure Payments and PCI
Ottawa - LinkedIn LearningMicrosoft Certified: Azure Fundamentals
Ottawa - SelfAWS Certified Cloud Practitioner
Ottawa - JobUnix badge
Ottawa - PentesterLabsCertified Information Systems Security Professional (CISSP)
Ottawa - SelfITIL v2
Ottawa - Job RequirementNetworking Technology - Microsoft Certified Systems Engineer (MCSE)
Ottawa - Praxis Training InstituteManagement Information Systems
Ottawa - Collège La CitéHigh School
Ottawa - Andrée LaurendeauSenior Information Systems Security Analyst
Ottawa - WEIR Marine EngineeringSecurity Architect / Design Specialist
Ottawa - Economic and Social Develpment CanadaVulnerability Assessment Specialist
Ottawa - Health CanadaSecurity Design Specialist
Ottawa - Shared Services CanadaSenior Integration Test Engineer
Ottawa - Micro FocusSIEM/UEBA Customer Success Manager
Ottawa - SecuronixArcSight PreSales Engineer
Ottawa - Micro FocusArcSight Technical Customer Success Manager
Ottawa - Micro FocusSecurity Consultant
Ottawa - My BusinessArcSight Security Consultant
Ottawa - Micro FocusNetwork Security Analyst
Ottawa - Environment and Climate Change CanadaApplication Security Consultant
Ottawa - Environment and Climate Change CanadaERP Consultant
Ottawa - Industry CanadaDigital Transformation Consultant
Ottawa - Canadian Mental Health AssociationImplementation Manager
Ottawa - WorkDynamics TechnologiesSecurity Operations Specialist
Ottawa - Bell CanadaService Desk Specialist
Ottawa - Adobe CanadaTechnical Business Analyst/Security Advisor
Ottawa - GrantiumInformation Security Advisor / Technical lead
Ottawa - FreeBalanceVideo Conferencing Dial-up Specialist
Ottawa - NortelPortfolio
Most recent work
This Site
Created this portfolio site to showcase my skills, experience and accomplishments.
VATRION: QR Code and URL Security Scanner
SIEMTrax
SA&A Security Practitioner
Reviewed project artifacts and provided deep expertise in Security Attestation & Accreditation (SA&A) for a government classified project, showcasing skills in Information Security, Security Operations, and Security Control Triage
Security SaaS Services
Championed a world-class SAAS customer experience and driving value realization for clients through strategic client partnerships.
Process Improvement
Played a crucial role in reviewing and enhancing Quality Assurance (QA) processes across the ArcSight ecosystem, contributing to security and quality for an improved end-user experience.
Customer Focus
Guided the team through the successful adoption of ArcSight security solutions contributing to customer satisfaction and value realization.
SaaS Architecture
Spearheaded efforts to architect and evaluate the deployment of ArcSight ESM in Azure to simulate a SaaS service and reported on gaps and limitations in the product along with the changes needed to turn it into a SaaS offering with lean Operating Costs.
SaaS Performance Testing
Setup a full ArcSight clustered stack in Azure and pushed it to incrementally up to 1 Million EPS to identify and report on bottlenecks to product development.
Technical Enablement
As the resident kubernetes and deployment expert, I created a full technical enablement course with videos on building the new ArcSight starting with network services all the way to integration and receiving events.
Technical Writing
Upon noticing hours wasted by support on rebuilds I created a "Tango Down, fix kubernetes P1 in under 5 minutes" document for Customer Support who had little resources or knowledge on troubleshooting and restoring broken kubernetes clusters on Priority 1 incidents back to normal.
Product Improvement
Initiated and led a Performance Testing effort to showcase the benefit of using SSDs instead of 5400RPM drives in the write and read heavy Logger product.
Release Improvement
Following multiple customer complaints about the lack of details of fixes in release notes, I improved processes to ensure developers added more details on each fix in JIRA for the documentation team to publish. This translated in substantial support or inquiry related requests to release note content at each release cycle.
Security Operations Center
Worked with the internal SOC team in capturing event sources to size up a kubernetes based installation of ArcSight for the Corporate SOC and designed a resilient solution to meet the requirements.
Product Innovation
Created a POC for a new ArcSight product to provide PKI services and to automate the certificate exchange process across hundreds of assets like SmartConnectors.
Detection Engineering
Engineered a simulated windows network for event generation and using known data sets to validate ML models as well as use case detection. This ensured that detection quality did not deviate following model or code changes.
Technical Writing
Evaluated technical product documentation, identified gaps that could lead to support/sales inquiries and worked with the documentation teams often being the author to update the documentation to reduce support costs and improve the customer experience.
Customer Focus
Guided the team through the successful adoption of ArcSight security solutions contributing to customer satisfaction and value realization.
Strategic Project / Tiger Teams
Drove key "White Glove" initiatives and played a central role in the success of high-profile accounts, contributing to substantial revenue generation and process improvement.
Risk Reduction
Identified legal liabilities and risks associated with customer production databases loaded in Oracle servers on employee laptops, with no disk encryption. Evaluated security solutions for end-point security and consolidated all databases on laptops into a central database with access control security processes.
Application Performance Testing
Customer responsible for 60% of the company's revenue was having performance issues with the J2EE application. Spearheaded a performance testing effort and built everything required, including updating recorded Jython scripts, for distributed testing to identify product fixes.
Lead Security Architect
Directed efforts in architecting and deploying ArcSight cybersecurity solutions, contributing to cross-functional collaboration and the development of implementation methodologies.
Threat & Vulnerability Assessments
Demonstrated proficiency in security assessments, penetration testing, and comprehensive reporting.
Information Security Program Delivery
Steered InfoSec project initiatives, contributing significantly to process enhancement, security controls, and knowledge transfer.
Security Operations Engineer
Played a pivotal lead role within the Security Operations team on the ETI SaaS email project, contributing to various aspects of the Identity Control Access Management system.
Digital Transformation
Led comprehensive digital transformation initiatives for customers encompassing testing, documentation, training, and system transitions, contributing significantly to company success.
Strategic Security Initiatives
Transformed company dynamics and reduced risks through strategic security initiatives and leadership.
Business Development
Pioneered and drove substantial financial gains, and elevated operational efficiency through a multifaceted approach.
Digital Transformation / Training
Upgraded the financial management system for the Nunavut and North West Territories, and trained their resources on new Standard Operating Procedures to manage the new system.
Network and System Implementation
Computerized the Sierra Leonian Ministry of Finance across 7 floors from received parts and managing local resources. Performed Physical penetration testing and site surveys then implemented mitigations to reduce risks. Trained the locally contracted company on network management and business continuity tasks.
War Zone Contractor
Designed a turn key network with systems to operate the financial management system for Iraq's Ministry of Finance, travelled in-country assess sites and deployed the solution.
Business Continuity
Provided the government of Antigua subject matter expertise in designing a resilient financial database replication strategy as well as other network related challenges.
Disaster Recovery
Travelled into a conflict country for a United Nations project to recover and fix the financial system for the country. Data had reached max configured size and was not growing with 3 months worth of data uncommitted in transaction log files. Rebuilt the database and hacked a process for the engine to import and commit the transactions in the log files.
Not just Solutions, Frameworks
In response to Solution Engineering, I've often had to create custom frameworks to manage new solutions or tools, ensuring attention throughout their lifecycle. I have a solid track record in getting at the root of issues and engineering solutions not just to address the issue but also bake in detective as well as protective layers to identify them earlier.
Consumer Product Inventor
Designed a product in Autodesk Inventor and 3d printed it. The product is a cabinet door attachment that enabled me to use my elbows or feet to open kitchen cabinets when cooking.