James Blocho

Continuous testing/measuring through a series of assessment techniques (PT, UT, MT, RT etc )in order to find vulnerabilities on critical infrastructure Sharing findings, priorities, & remediation options through reports to reduce risks to people, materials, & processes

State Duty Backfill Role: Responsible for all management functions including: operations, planning, logistics, finance and administration The Operations Section Chief is responsible for developing and implementing strategy and tactics to accomplish the mission objectives. Organizing, assigning, and supervising all the tactical and/or response resources assigned to the institution

Facilitated the completion of a previously delayed external audit by identifying & streamlining outstanding tasks that could be while coordinating with key stakeholders to ensure timely closure of other open items. Resolved delays by implementing effective remediation strategies and driving cross-functional collaboration to achieve closure.

Led planning and migration of over 6000 servers to a multi-cloud environment. Worked with a cross functional team of Resource managers, ITSEC, App Owners, and Executive members to coordinate, discover, communicate, and remediate risks/issues before this transition ie) Corp2Cloud/Data Center Exit initiative Supported the planning & implementation of key security functions (SSO/2FA, DR, IAM, Splunk, etc) & tools related to company security policy, vendor security assessments, and overseeing PenTesting & remediation Personal contributions: Helped drive a 36 month program delay within 3 months of joining team, identified overlap in resource planning (lease extension) that eased perceived time constraints, while also finding $13 million under utilized assets for repurpose within Data Center Exit (DCX) and Corp to Cloud (C2C) programs

Taking the lead in keeping cyber threats away from Air Force and other military computer systems.

"Local payments for global businesses" Yapstone is the payments platform that powers how the world pays Owned the BCPDR function of the organization and sat on the IR team with SOC constituents Lead the development & implementation of the system-wide risk management function of the information security program to ensure information security risks are identified and monitored Executed strategy for dealing with increasing number of audits, compliance checks and external assessment processes for internal/external auditors, PCI DSS, SOC2, NIST 800, GDPR, NYFDS State exam, etc Personal Contribution: Helped save $900K in resource budget by leveraging features of current tool sets by making adjustments to organizational policy, Reduced redundancy of compliance efforts by unifying IT, Engineering, Security, Legal & HR team while centralizing documentation

This started out as a Best Practices Consulting Service for SaaS based Startups, then turned Hacker Home & Incubator > Micro Portfolio, and then back to freelance consulting when real estate went wild. As a general practitioner, I am open to hearing any current operational issues your organization is having to see how I can help. I used to go by the title of a Strategic Resource Consultant for all SMB and Startup needs. When it comes to cyber security, secure code is the safest code, and best practices keep networks secure. We can help build secure code into your SDLC with our preferred vulnerability management package. These tool sets and processes can save countless hours, dollars, and headaches (engineering retention!!) to traditional security review and fix practices still in use. For security compliance concerns, we do internal audits and prep work for PCI, SOC2, GDPR, ISO 27001 mostly as well as reorganizational work to help work compliance into normal workflows and processes. See more in Project Section below:

Solutions-orientated IT Security Operations Specialist with success directing a broad range of network & application security initiatives to include Vulnerability Assessments, Intrusion Detection & Prevention, Dynamic Application Scanning, Security Engineering, and Business Integration Support This franchise was owed and operated by FOB Miami LLC

(Formerly Tinfoil Security) Eliminating exploitable vulnerabilities makes it more difficult for attackers to gain access to applications and systems exposed. Founded in 2011, the company’s signature web scanning tool identifies vulnerabilities on web applications and is tightly integrated with DevOps workflows. With its DAST [dynamic application security testing] and API security testing capabilities, they are in a stronger position to help developers and IT security professionals build secure solutions for their organizations.

HubHaus is a provider of a shared community platform to solve housing issues in the modern age Oversaw the planning, implementation, and overall delivery of core security policies and technologies within core applications such as: SSO/2FA, Splunk, Vulnerability Mgt, & PenTesting Provided awareness to key concerns of operational model while making formal and informal adjustments to organizational policies to access risks through threat modeling

Online Cohort through IVMF

Watch my backflip in the video below from Venture Studios!

Study Abroad