| Contact Information | |
| Name: | Soren Frederiksen |
| Email: | sorenfred (at) msn (dot) com [email concealed] |
| Location: | Bailey, Colorado, United States |
| Resume | |
| Position/Title: | Sr. Security Engineer |
| Resume: |
Soren G. Frederiksen Phone: (303) 816-5230 Email: sorenfred (at) msn (dot) com [email concealed] Languages: Perl, C and Fortran. Operating Systems: Solaris, HP-UX, IRIX, SunOS, Ultrix, AIX, Nokia IPSO, Linux, UNIX, Windows 3.1, 9X, NT 4.0, 2000 and XP Computer Hardware: SPARC Servers, Silicon Graphics Workstations, HP Workstations, IBM RS/6000, Nokia Firewalls, Cisco PIX Firewall, DECStation, Apollo Workstations, VAXes, IBM/AMDAHL, Mainframe/AMDAHL, Macintosh and PCs. Network Hardware: Ascend, Bay Networks, Cisco, Xylan/Alcatel Network Equipment and RedCreek/Sonicwall VPN Devices. Software: ISS RealSecure, ISS Internet Scanner, ISS System Scanner, Norton AntiVirus Corporate Edition, CA Inoculan, Checkpoint Firewall-1, SecuRemote, IPsec VPNs, Tripwire, WebSense, LogCaster, Trusted Enterprise Manager, Sybase, MS Office, VPN, HTTP, Intrusion Detection, SNORT, NESSUS, Various GNU Software and SNMP. Training: Checkpoint Firewall-1 Management (CCSA & CCSE), Ethical Hacking, GIAC Certified Forensics Analyst (GCFA). GIAC Penetration Testing (GPEN) EMPLOYMENT Stream Global Services, Richardson, Tx 7/04 – Present Information Security Manager As the Systems Security Manager I am responsible for setting the overall Security Policy of Stream, a call center company with over 15000 employees distributed around the world. All changes to the Firewall policies, the Anti-Virus and Active Directory configurations require my approval. I built and manage approximately 30 Network Intrusion Detection Systems located around the world at various sites with in the Stream network. All critical security incidents are managed by the security team, and I am responsible for carrying out the forensic analysis of compromised systems. I am also responsible for the management of an account at Qualys which is used to scan all Stream Internet facing systems. I am responsible for the the management and configuration of NESSUS used to scan internal systems as part of PCI compliance. I am responsible for the maintenance and management of Stream external DNS infrastructure. Affinity Group Inc., Englewood, Co 2/04 – 5/04 Computer Security Consultant Worked at Affinity Group as a Security Consultant. I surveyed their Network Infrastructure and procedures resulting in a number of recommendations on how to improve their overall security. I also checked their Firewall configuration and made a number of recommendation to make the system more secure. My current task is helping to implement a number of my recommendations and to work on the Network Intrusion Detection System. Software Spectrum Inc., Garland, TX 6/95 – 10/03 Manager – Systems Security 8/97 - 10/03 When Software Spectrum created its first dedicated security team, I was offered the Security Manager position. I defined the roles and responsibilities of this newly created team. I worked from my house in Colorado and manage all IT-related Security activities for the entire organization of about 3000 employees, including eight large offices in North America, Australia and Europe. My various responsibilities included the following: Develop and maintain company wide Security Policies and Procedures. Develop a procedure to handle Security Incidents Take responsibility for and Manage 12 Firewalls around the world. Including two redundant Nokia Firewalls. Set policies for External Router configurations. Installed and manage a Content Filtering program (WebSense) on systems around the world. Installed, manage and monitor the Corporate Edition of Norton AntiVirus. It is installed on systems around the world and is managed from one central location. I developed 4 layers of AntiVirus protection. We use MailSweeper to restrict incoming mail attachements, and use Sophos to scan all incoming mail messages. We use NAV for Exchange on all internal Exchange Servers and NAV for the Desktop. With this configuration we have not had any major internal virus infection in the last 3 years. Install and manage various Intrusion Detection software programs RealSecure, Internet Scanner and System Scanner from Internet Security Systems. Tripwire to check for unauthorized changes to systems. LogCaster to check for unauthorized activities. I have configured the Intrusion Detection Systems to alert me of any Security events and in addition I continuously check for Security alerts and coordinate the response to these alerts. Developed the Security Requirements for the Microsoft Windows systems. Developed the secure buildout procedure for various Solaris systems used as Security Servers. On-call 7x24 for any critical security event. After a reorganization in our Australian offices, I was selected by the CIO to spend three months in Sydney, rebuilding the IT department, and selecting a new IT Manager for that Operation Center. Network Services Manager 12/95 – 8/97 I managed a team of six people responsible for the entire network infrastructure of Software Spectrum. This included all Hubs, Routers, switches, and servers (Novell, NT and Unix) used by Software Spectrum. I not only managed the effort of the group but was also involved in some of the daily technical work. I helped set the technical direction of Software Spectrum’s Network Infrastructure, and was involved in the decision to move from a routed backbone to a switched backbone. As the manager of Network Services I planned, procured and was closely involved in the implementation of the following (as manager and technician): ATM link between our Garland corporate office and Spokane call center. A significant upgrade of the company’s core hardware platform, a Sun Enterprise system. This included the purchase of another storage array, as well as additional memory and CPUs. Migration of our Routed backbone towards a switched backbone. Rollout of numerous new NT 4.0 servers. Migration of company from a disparate Windows 3.1 architecture to a Windows NT 4.0 domain-based model. Unix System Administrator 6/95 – 12/95 Unix System Administrator for a SUN 2000 and several Sparc Station 20/61. I was responsible for the all upgrades (hardware and software) and the maintenance of all required software patches. The SUN 2000 had 4 processors and about 50 GB of disk storage, as a dedicated platform for the company’s Sybase environment. It had a 30 GB Sparc Storage Array under the control of Veritas Volume Manager. I planned and implemented a new router-based network architecture. A network whose routing had been done by a suite of core NetWare server was redesigned to operate via a set of core WellFleet ASN Stackable routers. A distribution layer of Token Ring networks, in two separate buildings, were uplinked into the two ASN stacks, which were in turn connected with a dual-attached FDDI link. Installed and configured a Solaris Netra running Checkpoint Firewall-1 version 1.0, and as part of this helped define our initial web presence. Texas National Research Lab. Comm.,Waxahachie, TX 11/94-6/95 Senior Systems Programmer Systems programmer and backup System Administrator for the High Performance Computing Center (HPCC) run by the TNRLC. The HPCC consisted of over 100 integrated-Unix workstations from Silicon Graphics, SUN, and Hewlett-Packard. Responsibility included the management, development and support of all system and application software on the HPCC. This software included in-house developed software written in C and interfaced to a Sybase Database, GNU software and various application software packages. This support required the setup of an internet web and news servers utilized by all of TNRLC. Electrospace Systems Inc., Richardson, TX 2/94 – 11/94 Staff Engineer Project manager for the Global Network Management System IR&D project. This project was the development of a Monitor and Control System that used the Simple Network Management Protocol (SNMP) as an interface to any device. It required integrating commercial of-the-shelf software with Electrospace developed software. All the software was written in C and installed on a SUN Sparc10 workstation and a PC running SCO UNIX EDUCATION 1982 - 1987 University of Ottawa Ottawa, Ontario, Canada Ph.D., High Energy Physics 1978 - 1982 University of British Columbia Vancouver, B.C., Canada B.Sc., Physics with Honors REFERENCES Available upon request |
