Feb 25 2010
Contributor Bios
Dan Wilson, Accuvant Co-founder and Vice President of partner alliances
Dan Wilson has been working in the technology industry for over 15 years, primarily in the information security sector. He has held various sales and managerial positions with manufacturers, distributors and value-added resellers. This breadth of experience has been extremely valuable in his current role managing Accuvant’s distribution and manufacturer relationships, as he is able to understand the unique business drivers and requirements of each of the members of the 3-tier distribution model. In the last five years, Accuvant has grown revenues by more than 700% and has a presence in more than 25 US cities. Accuvant has received numerous accolades from their manufacturer partners, and Wilson is an active member of a number of Partner Advisory Councils. His voice, as the voice of Accuvant, has influenced dozens of partner programs.
Doug Landoll, CISSP, CISA, MBA, Director of Risk & Compliance Management – AccuvantAs Director of Risk and Compliance Management for Accuvant, Landoll provides leadership, methodology development and oversight for all aspects of project delivery. In addition to project and people management, his specific areas of expertise include security risk assessment, regulatory compliance, security program development, and information security policy.
Landoll has been in the field of information security risk and compliance since 1988. He has previously held positions as a senior analyst with the National Security Agency; Founder and Director of Arca Common Criteria Testing Laboratory; Founder and CEO of two security consulting start-ups: Veridyn Inc, Lantego LLC; Professional Services Director for several publically trade companies: Exodus Communications, EnPointe Technologies. Landoll has authored information security standards and books and speaks regularly at industry conferences.
David Bonvillain, CISSP, Vice President – Accuvant LABS – Accuvant
As Accuvant’s first employee and an industry veteran, David Bonvillain is the Vice President of Accuvant LABS. Bonvillain is responsible for providing leadership to the Accuvant LABS assessment practice area and ensures the ongoing world-class capabilities of the Accuvant LABS team.
Bonvillain has been providing security consulting services for more than nine years. Prior to joining Accuvant, Bonvillain was a senior consultant with Internet Security Systems’ X-Force professional services and a senior security consultant with Netrex. He has presented at multiple regional and national security conferences such as BlackHat, ISSA, TRISC, CIMA and AHIA/CHAN, and has been published in publications such as CSOonline, BBB and Twin-cities business magazine.
Bonvillain is a Certified Information Systems Security Professional (CISSP), a Checkpoint Certified Security Engineer (CCSE), a NetScreen Certified Security Associate (NCSA), a Microsoft Certified Professional (MCP), and an ISS-Certified Engineer.
Jon Miller, CISSP, Director – Accuvant LABS – Accuvant
Jon Miller is a Director with Accuvant LABS possessing over 12 years of experience in information security consulting. Miller provides leadership into the marketing, sales, and research and development functions of the Accuvant LABS team. Previously, Miller was a Principal Consultant on the Accuvant LABS team, specializing in penetration testing and enterprise level security assessment programs. His experience includes wireless assessments/penetration testing, threat analysis, application assessments (web and binary), ISO compliance, Visa/MasterCard PCI/SDP, HIPAA compliance, incident response and forensics, physical security auditing, as well as network architecture design and review.
Prior to joining Accuvant, Miller served as a member of IBM Internet Security Systems’ X-Force Penetration Testing Team. He has been featured in multiple publications, including Information Security Magazine, PCWorld, Forbes, The New York Times, CNN.com, the San Jose Mercury News and CNN. Miller has also given presentations at Blackhat, Defcon, IEEE, ISSA, and Toorcon, and has even received the honor of being a Guest Lecturer at BYU.
Miller is a Certified Information Systems Security Professional (CISSP), a PCI Qualified Security Assessor (QSA), a Certified Secure Software Lifecycle Professional (CSSLP), a Certified Wireless Network Administrator (CWNA), an ISS Certified Engineer, and Certified in the Governance of Enterprise IT (CGEIT).
Jim Broome, CISSP, Director – Accuvant LABS – Accuvant
Jim Broome, an information security industry veteran with two decades of experience in the field, is a Director of Accuvant’s assessment team and also acts as the technical lead for the Accuvant LABS practice area. Broome has performed innumerable consultative engagements including enterprise security strategy planning, risk assessments, threat analysis, application assessments, network assessments, penetration testing and wireless security assessments for a large number of Fortune 500 clients.
Prior to joining Accuvant, Broome was a Principal Security Consultant for Internet Security Systems (ISS) and a member of the X-Force penetration testing team. Before X-Force, he was the Director of Network Operations for Cavion.com, a managed service provider exclusively for credit unions. He also is one of the original authors of several training programs, including Checkpoint Software’s CCSA/CCSE program, Jim is a well regarded security/technology instructor and mentor to many administrators and IT management organizations. Broome is a Certified Information Systems Security Professional (CISSP), a Checkpoint Certified Security Engineer (CCSE), a NetScreen Certified Security Associate (NCSA), and an ISS-Certified Engineer.
Chris Gray, CISSP, CISM, CISA, CIPP, CHFI, Senior Risk and Compliance Management Consultant – Accuvant
As senior risk and compliance management consultant for Accuvant, Chris provides world-class security, compliance and IT risk management consulting services to Accuvant clients, focusing on compliance readiness and controls framework integration. Gray has considerable experience in the creation and integration of controls frameworks across a number of industries and subject areas, including Sarbanes Oxley (SOX 404), privacy, and the Payment Card Industry (PCI).
Gray has served in leadership, audit, and technical roles across the managed services, retail, banking, and ecommerce industries. Previously, Gray served as a Director for a Fortune 1000 company. Prior to this, he served as an operational security team manager for the Department of the Treasury and Federal Reserve banking system; a security manager and architect for a globally dispersed web-hosting environment; a senior security and risk consultant for Deloitte and Touche; and a security system administrator. Gray has extensive experience in vulnerability assessment, audit response and risk mitigation and management processes.
Matt Bossom, Program Manager – Technology Solutions – Accuvant
Matt Bossom is program manager for Accuvant’s Technology Solutions practice. Bossom, who brings more than eight years of IT security experience to the position, is responsible for developing business relationships with key technology partners, creating tactical business solutions and helping clients evaluate, select, deploy, configure and integrate a wide range of security and networking products.
Previously, Bossom served as the director of wireless solutions for Accuvant. In this role, Bossom was responsible the design, implementation and assessment of wireless network systems, as well as evaluating the technological stability and functionality of industry leading wireless systems. Bossom is a Certified Wireless Security Professional (CWSP); Cisco Certified Network Associates (CCNA); Cisco Wireless Field Engineer (WLANFE); Certified Wireless Network Administrator (CWNA); Certified Wireless Network Administrator Instructor; Certified Aruba Networks Integrator.
Chris Lyttle, Principal Technology Solutions Consultant – Accuvant
Chris Lyttle has more than 15 years of experience in the IT industry. As a Principal Wireless Solutions Consultant, Lyttle provides post-sales support and consulting to Accuvant’s clients with expertise in wireless networking and security solutions. He is a subject matter expert in the design and implementation of wireless networks and is experienced in integrating wireless networks with sophisticated authentication architectures and PKI environments. Areas of expertise include enterprise wireless site surveys, assessments and deployments, firewall and security technologies and SSL-VPN technologies.
Previous to joining Accuvant, Lyttle was a senior security consultant and engineer for a California-based value added reseller and was responsible for deploying security solutions in both large and medium enterprise environments. He is a CWNP certified CWSP (Certified Wireless Security Professional), CWNA (Certified Wireless Network Administrator) and an Aruba Certified Mobility Expert (ACMX).
Phil Brass, Managing Principal Consultant – Accuvant LABS – Accuvant
With 20 years of information technology experience, Phil Brass is a very seasoned security assessor and application designer. Brass’ focus is primarily on application security initiatives including penetration testing, code reviews, secure software design and tool development. Prior to Accuvant, Brass worked at IBM ISS as a Windows security expert, software engineer and team lead on the Internet Scanner 5.0 project and SiteProtector Security Fusion Module. He is a specialist in penetration testing and application security auditing, and has extensive knowledge in software engineering, programming languages, network communications protocols, relational databases and all things security as it relates to those technologies. Prior to ISS, Brass worked as an application engineer and software architect in the health care information systems sector where he focused on protocols and communications with diverse hospital systems, as well as high-level architectural design of distributed inventory management systems.
Matthew Parcell, Senior Security Consultant – Accuvant LABS – Accuvant
Matthew Parcell is an Application Specialist on the Accuvant LABS assessment team with four years of experience in the security industry. Coming from both a development as well as network and systems management background, Parcell honed much of his security testing experience while employed with SPI Dynamics, an industry leader in web application security. His extensive experience with a wide variety of web application technologies and languages and a specialization in Java/J2EE coupled with a deep understanding of static code analysis and software development allows Parcell to offer unmatched expertise when analyzing the security of Accuvant clients application environments and makes him a perfect complement to the skills in place within the Assessment Practice.
Parcell holds a certificate in Information Assurance and a certificate in Economics from Georgia Institute of Technology and is certified on the WebInspect product set from SPI Dynamics.
Kirk Greene, CISSP, Managing Principal Consultant – Accuvant LABS – Accuvant
Kirk Greene, an information security industry veteran with over ten years of experience in the field, is a Managing Principal Consultant with the Accuvant LABS assessment team. Greene has performed a variety of consulting and managerial responsibilities, ranging from developing and performing financial institution regulation audits to managing enterprise assessments for multi-national corporations.
Prior to joining Accuvant in 2004, Green was a principal security consultant with Internet Security Systems’ X-Force professional services and a senior security consultant with The Greentree Group, where his primary responsibilities included the installation, configuration and management of the Air Force and Army Exchange Services information security infrastructure. Greene was involved in the initial development of the Visa Payment Card Data Security program and has developed and taught security awareness training courses for law enforcement associations, city governments and manufacturing industries.
Greene is a Certified Information Systems Security Professional (CISSP), an ISS Certified Engineer, a PCI Qualified Data Security Professional (QDSP), and a Qualified Payment Application Security Professional (QPASP).
Anthony Blakemore, Principal Security Consultant – Accuvant LABS – Accuvant
Anthony Blakemore has been employed as a Security Consultant since graduating with honors from DePaul University in 2005 and is a Principal Consultant with Accuvant LABS. He began his career with a focus on web application and security tool development, and then transitioned to the dedicated application assessment team, performing application security consulting services including assessments and penetration testing. In 2008, Blakemore joined the Accuvant LABS team assuming a role that allows him to continue to focus his efforts on the application security space by performing comprehensive application assessments, code reviews and penetration testing, as well as helping augment the assessment practice’s capabilities by designing and developing security tools.
Before joining Accuvant, Blakemore worked as a security consultant and project lead at Neohapsis, where he conducted penetration tests, vulnerability assessments, and application assessments against business critical applications and architectures for dozens of Fortune 500 and multiple Fortune 100 companies. Blakemore has been an active member of the security community for many years, attending and speaking at high-profile industry conferences such as Infraguard, ISSA & OWASP and delivering quarterly web application security lectures and demonstrations at DePaul University.
Mark Maxey, CISSP, Managing Principal Consultant – Accuvant LABS – Accuvant
With nearly a decade of experience, Mark Maxey is currently focused on application security initiatives including penetration testing, code reviews, secure software design, application security training and tool development. Prior to joining Accuvant, Maxey owned an independent security consulting firm where he performed a wide range of security services with a focus on application security focused on the BPO market. Maxey has created and performed training sessions in regards to regulatory compliance issues, network and application security to a wide range of technical as well as non-technical audiences.
He also has been is involved in several open source projects including development of the Interchange e-commerce platform. Maxey is an OWASP and WASC project contributor, and is a Certified Information Systems Security Professional (CISSP), VISA Qualified Data Security Professional (QDSP), and VISA Qualified Payment Application Security Professional (QPABP).
Evan Tegethoff, CISSP, ISO 27001 ISMS Auditor, QSA, Solutions Architect – Risk and Compliance Management – Accuvant
Evan Tegethoff has been in the field of information security and compliance since 1995. As Solutions Architect for Risk and Compliance Management for Accuvant, Tegethoff manages all aspects of sales and marketing for the practice. In addition to project and people management, his specific areas of expertise include regulatory compliance, security program development, and information security policy.
Prior to Accuvant, Tegethoff served as a corporate officer for Tri-Sage, a business he helped found in 1995 focused on information security consulting and integration, until it was acquired by high-profile Chicago-area Managed Security Service Provider, Telenisus. Tegethoff also served as National Practice Manager of Strategic Security Solutions for Forsythe Solutions Group, where he was responsible for information security compliance and policy services.
Additionally, Tegethoff has served as a representative to the INCITS CS1 Group, the US technical advisory group to the ISO Cyber Security Standards, reviewing and voting on standards such as ISO 17799 and ISO 27001. He holds a Bachelor of Arts in Communication from Michigan State University.
Comments Off