Kyle A Waters

VM Response Analyst

As a Vulnerability Management Response Analyst, I work directly with all Line of Business App Teams, Subject matter experts, Production Management Teams, Product Owners, Senior Technology Management, and Risk and Control functions on.

• Executes creative security solutions, design, development, and technical troubleshooting with ability to think beyond routine or conventional approaches to build solutions or break down technical problems.
• Minimizes security vulnerabilities by following industry insights and governmental regulations to continuously evolve security protocols, including creating processes to determine the effectiveness of current controls.
• Work with stakeholders and business leaders to understand security needs and recommend business modifications during periods of vulnerability.
• Conducts discovery,vulnerability, penetration testing,and threat scenarios on multiple organizational assets to identify and assess if vulnerabilities are present and executes threat modeling for multiple applications including external applications interacting with the internal JPMC network.

Projects

• Created mini projects for pipelining the VM team current tools to be use via automation.
• Created a python roadmap for multi tool integration. The tool will allow Analyst with no access to retrieve data with out gaps.

VM Remediation Analyst

Cybersecurity Vulnerability Management Remediation Team is responsible for leading the remediation of externally and internally identified critical vulnerabilities impacting JPMorgan Chase applications and/or infrastructure components. This function is performed globally and at the scale of which JPMC operates by collaborating with business and technical partners to remediate internal/external risk by leading efforts focused on resolving systemic vulnerabilities, notifying, and coordinating remediation efforts with various Lines of Business to produce the most effective process within the firm. My position on the Remediation team’s actions is driven based on the criticality of the vulnerability by balancing risk and the ability for our Line of Business partner to service their clients and customers globally.

• Foundational knowledge of cybersecurity organization practices, risk management processes and principles.
• Manage remediation activities ensuring appropriate, timely and complete resolution.
• Communicate technology findings with leadership and Line of Business key stakeholders and provide accurate remediation metrics and management reports on a timely basis.
• Strong deductive reasoning, critical thinking, problem solving, and prioritization skills.

Projects

• Enhance our vulnerability management tool (CWS) by migrating it over to FARM for more efficient functionally .
• After migrating to FARM, I created an internal vulnerability website that allowed the firm's product owners and application owners to remediate their findings without having to search the internet for remediation details.

Security Engineer

Fulfilled an aggressive role as Security Engineer by leading security risk assessments and monitoring the Information Technology and Operational Technology environments with a focus on documenting risks in a risk register. I was also responsible for the identification of weaknesses and gaps in the security program as they relate to the security, privacy, and resiliency of the technology environment, and develop and document risk treatment plans that balance security risks while not negatively impacting efficiency or innovation.

Further, monitor compliance with security configuration standards for the IT servers, software and networking platforms based on CIS Benchmarks and provide Sarbanes-Oxley Section 404 compliance related to project management, change management and security. As a Security Engineer, I was assigned with defining metrics to assess the success of the security program and provide regular reports to security and business leadership. While implementing and maintaining controls for compliance and privacy. Our role also was a liaison to internal and external audit teams as needed.

Projects

• Leveraged leadership to train other employees on security awareness by creating and executing security awareness runbooks and monthly simulated phishing exercises .

Penn State University