Luke Westbrook

• Lead enterprise-wide IT security and operations strategies, including governance, compliance, and risk management. • Directed Quality Assurance for mission-critical systems driving $950M in revenue and engaging 10M+ guests, aligning testing programs with business objectives and leveraging promotion analytics to avert $800K in losses, ensuring both customer satisfaction and operational resilience. • Direct incident response, threat detection, vulnerability management, and forensic investigations. • Oversee IT and security spend (~$2.5M), optimizing professional services and delivering budget efficiency. • Develop and implement ITIL-aligned practices in incident, problem, change, and asset management. • Coordinate cross-functional teams, manage vendor security assessments, and lead security awareness initiatives. • Support audits and ensure SOX, NIST, ISO 27001, and SOC 2 compliance.

• Reported directly to CIO, hiring and onboarding security staff while managing team performance. • Evaluated and implemented new IT security technologies aligned with business needs. • Strengthened application lifecycle security. • Coordinated with business units to meet operational goals. • Administered various security systems, and performed server assessments. • Promptly addressed security incidents.

Experienced Senior Security Engineer with expertise in strategic security planning, technical implementation, and incident response. Skilled in designing, installing, operating, and maintaining cybersecurity systems. Collaborates with C-suite executives to achieve mission-critical objectives. Successful in projects like tactical security remediation, O365 hardening, and vulnerability scanning. Implements identity and access management practices, conducts security awareness training, and deploys phishing campaign simulations. Proficient in ITSM, incident response, change management, and compliance. Reduces costs, implements access controls, and enhances vendor health. Builds scalable solutions and contributes to tool selection. Writes policies, performs patching, and troubleshoots security incidents. Manages a broad range of security systems and improves security posture. Collaborates with cross-functional teams and gains executive buy-in. Self-driven, adaptable, and adept at virtual environments and next-gen security tools. Facilitates O365, Azure, and SharePoint security. Excels in organization, presentation, and teamwork. Committed to creating a positive work environment. Develops initiatives with commercial security solutions. Extensive knowledge of Active Directory, firewalls, and policies.

Role Overview:  Leads security focused teams Threat Hunter Incident Response Vulnerability Assessment and Management Penetration testing Data loss prevention I’m a multifaceted security leader who directs the incident response program by leading diverse teams of key stakeholders. These security focused actors include threat intelligence, network security, server, patching, and desktop support. My hands-on technical information security roles have placed me into a variety of leadership spaces working with directors from multiple organizations. I primarily perform threat hunting activities and issue guidance to direct report member leaders of security focused teams. Coordinates enterprise-wide support to manage and respond to cyber security incidents.   Directs second line of defense security engineers and delivery managers on response activities.  Mitigates immediate and potential early-stage threats to the environment. Validates unauthorized VPN users through OSINT Traced phishing attempts back to a compromised IoT device at a 4th party vendors office. Analyzes log data through various dashboards to identify possible threats. Triages SIEM data for incidents to prioritize scope, impact, and effects of incident threats. Performs investigations through relevant cyber forensic processes Conducts data loss prevention campaign on employee insider threats targeting attempts to exfiltrate sensitive and confidential organization documents.   Troubleshoots root causes of security tools and tunes out known traffic. Regularly meets with critical members of the incident management plan including business continuity, security operations, privacy, architecture, and disaster recovery. Commands a high level of integrity and thrives in a team environment centered on mutual trust and respect.

Trusted technical, security, and compliance adviser. Conducting compliance with affiliated regulatory bodies, a cyber security expert with an understanding of the ever-changing threat landscape. Working closely with the CIO / EVP and CEO to align business and information security objectives for key stakeholders. Driving best practice security solutions among 3rd party vendors, monitoring for breaches, conducting penetration tests, and social engineering testing. Monitors firewall, directory controls, server configuration, and anomalous network activity to regularly report to senior executive leadership. Purchasing influencer for security appliances and services. SIEM, Endpoint, Cloud security, Identity & Access Management. Establishes metrics for program effectiveness and provides annual information security report to the Board of Directors. Member of executive Committees. Regularly collaborates with the compliance and risk team while focused on continuous improvement for legislation risk assessments. Performs business impact analysis and program management for our highest risk assets and vendors. Leverages e-commerce through project management implementation with assistance from the database architect, and works with general counsel as necessary. This role performs: penetration testing, vulnerability management tools use, reviews various dashboards and organized management tools, data processing, user provisioning, and using industry knowledge to leverage products and application framework information. Analyzes reports for static and dynamic networks, reviews engineering for enterprise software, loss prevention, debug web application design flaws, acquisition and procurement, and reviews license management.

Two Master Level Degrees Achieved - Accounting and Cyber Security / Information Assurance

Bachelor's degree completed in three years. Majoring Psychology, Minor Studies in Computer Science