Cory Withers

Planning/Implementing company-wide Cybersecurity measures. - Creating ISO 27001 and SOC 2 compliant Information Security Management System. - Audit Preparation: ISO 27001, SOC 2, PCI-DSS - Implementation of Phishing training and simulations. - Coordination/Planning of all user security and privacy training - Complete rewrite of company policies and procedures related to risk management. - Coordination of Risk Assessments, Vulnerability Management, and Penetration Testing. - Management of Bug Bounty Program

Shifted to a new role focused almost exclusively on Cybersecurity. After I had pushed for the creation of a Security Operations Center, I was given the go-ahead to start building the foundations that would facilitate that, as well as advising on the purchase of core equipment/software for that purpose (SIEM/SOAR, EDR/XDR, NGFW, IDS/IPS, etc)

Originally hired as a Network Engineer, but focused primarily on Cybersecurity devices within that sphere, eventually shifted towards more of a Cybersecurity focused role with a lot of pushing for the creation of a Security Operations Center.

Originally hired as a web developer, but after completing my first project; joined a small team tasked with building a framework to automate the deployment and testing of NFV (Network Function Virtualization) and SDN (Software Defined Networking) solutions. I then moved to an entirely Cybersecurity focused role – alternating between penetration testing and security architecture and cybersecurity consulting duties.