Tim Harding

Senior Information Security Engineer

Root Insurance

Dec 2022 - Current (3 years 7 months)

• Manage the entire vulnerability management program for a $1.08B insurance company with 1,000+ employees. • Transformed an underperforming information security organization, increasing SLA adherence to 95+% annually. • Served as the cybersecurity SME, defining, monitoring, and reporting on key cybersecurity metrics and program updates to executives and the audit committee, supporting compliance and governance functions. • Implemented and deployed a Crowdstrike SIEM solution to aggregate logs, monitor security events, and improve incident response. • Owned the full lifecycle implementation of the DLP program, from vendor selection and policy design to enterprise deployment and operational monitoring. • Contributed to the incident response t

Information Security Engineer II

Root Insurance

Feb 2021 - Dec 2022 (1 year 11 months)

• Led the vulnerability management and incident response programs, covering all cloud assets and endpoints with custom risk metrics and real-time reports. • Actively monitored, investigated, triaged, and remediated security incidents to minimize business impact. • Ensured adherence to security best practices by creating monthly security awareness training, launching a monthly L&L series, implementing a phishing simulation program, and performing vendor risk assessments. • Protected against emerging threats by deploying CarbonBlack and an agent-based system to automate patches.

Security Engineer I

New Seasons Market

Nov 2019 - Feb 2021 (1 year 4 months)

• Reduced security risks by designing and launching a security program with security change management workflow, vulnerability management solutions, and bug bounties for 100+ stores across 5 brands. • Streamlined vulnerability management and accelerated incident response with Rapid 7 for 1,500+ assets. • Strengthened the reliability and security of AWS assets and Windows streams by automating patch management.

Contract Security Engineer

Columbia Sportswear

Feb 2019 - Nov 2019 (10 months)

• Led vulnerability scanning of POS systems, computers, network gear, printers, and cloud assets to eliminate risks. • Accelerated threat detection and reduced system downtime by deploying Carbon Black to 2,000 servers. • Owned the end-to-end deployment of Carbon Black to 2,500+ servers to improve digital asset protection.

A

Cyber Security Analyst

Anitian Cloud Security

Mar 2018 - Feb 2019 (1 year)

• Oversaw cloud security monitoring, managed alerts, and performed threat hunting to identify compromises.

About

Detail

Timeline

Résumé