Christopher Russell

CISO @ tZERO Group | NightDragon Advisor | PhD Student

Plano, TX, United States

Details

Education: Doctor of Philosophy - PhD

Cyber Defense

Dakota State University

2022 : 2024

Master of Science (M.S.)

Cybersecurity

The University of Dallas

2014 : 2016

East Asian Studies

Bates College

1996 : 2000

DLPT

Modern Standard Arabic

Defense Language Institute Foreign Language Center

2000 : 2001

Bachelor of Arts (B.A.)

Security Management

American Military University

2012 : 2014

Experience: • Achieved a 300% increase to NIST CSF audit score within one year.

• Responsible for DevOps since 2022.

• Built out a security team based in Ireland

• Responsible for cyber security programs for all tZERO Group subordinate business units to include tZERO Crypto, tZERO Markets, Speedroute etc.

• Built and maintained AppSec program for secure SDLC to include static and dynamic analysis.

• Established Data Governance program with asset tags, data owners and appropriate access controls.

• Built vulnerability management process, with dynamic testing and scanning.

• Enhanced existing EDR capabilities with custom indicators of compromise process based off threat intelligence reporting.

• Established Insider Threat monitoring capabilities.

• Ensured regulatory compliance for protection of customer data in accordance with SOX, SEC, FINRA and various State regulators.

• Provide quality control for all security tool configuration standards.

• Conducted gap analysis and risk assessments to establish security programs roadmap.

• Conducted threat modeling and produced mind-map of tZERO specific threats.

• Finalized and approved all cybersecurity policies and procedures.

• Established formal cybersecurity onboarding training program and acquired PluralSight for continued team training tracks, with specific goals and milestones.

• Conducted counseling and mentoring sessions for entire cybersecurity team to ensure long term alignment on goals and capabilities.

• Coordinated with DevOps to ensure CIS benchmarks being followed for builds, and helped determine remediation paths during spring planning.

• Coordinated all third-party audits and pentesting engagements.

• Worked hand in hand with the legal team to ensure constant compliance among all regulatory bodies, and to proactively collect evidence for all required external due diligence requirements.

• Conducted all cybersecurity vendor selection processes, and researched the security tools

effectiveness for tZERO-specific needs.

2021 : Present

tZERO Group, Inc.

Chief Information Security Officer

Advise NightDragon investment team and portfolio companies to identify and scale the next generation of leading companies in the cybersecurity, safety, security and privacy industry

2022 :

NightDragon

Advisor

Snyk Ambassadors are application security champions, leading activism in their respective communities

2021 :

Snyk

Ambassador

•Threat Embers Threat Intelligence

•NFT on ERC-721 token deployment

•Sparx Coin Platform in development (deployed on ethererum but discontinued)

•Hyperledger Sawtooth experience

•Certified LFS171x : Blockchain for Business

•Certified Blockchain Expert Certification

•Multiple Ethereum/Solidity contracts deployed

•Blockchain Infrastructure Security

•Decentralized Security Application Development

•Blockchain and Cryptocurrency Security Consulting

•Cyber Risk Management and Vulnerability Assessments

•Regulatory Compliance Coordination

2016 :

h0neyb0t LLC

Owner / Blockchain Security Solutions

•Supervise the integration of new cloud security solutions for Cyber Security Operations Center (CyberSOC).

•Based on New Technology and board approval, analyze technology and resource needs, to plan, assess and conduct proof of concepts for new security solutions.

•Oversee the operational use of AWS cloud environment, maintain cost saving initiatives and ensure complete visibility and security for cloud environment.

•Ensure SOC II Type II and PCI compliance for all services, and provide all evidence and documentation to pass yearly audits.

•Confer with stakeholders to discuss project specifications, procedures and business requirements.

•Coordinate and direct projects, making detailed plans to accomplish goals and directing the integration of security related solutions.

•Plan and direct the installation, testing, operation, maintenance, and repair of Cyber SOC systems.

•Direct, review, and approve product design and changes.

•Document processes for all current solutions while onboarding new solutions with a high level of detail.

•Develop and implement policies, standards and procedures for the engineering and technical work performed in the CyberSOC.

•Decrease cost of goods sold on all our engineering services, to align with company financial goals.

2019 : 2021

Critical Start

VP of Security Engineering

Company: tZERO Group, Inc.

Years of Experience: 18

Spoken Language: Arabic

Skills Access Control, Access Control Management, amazon web services (aws), AWS Security, Blockchain, Business Process Improvement, change management, Cloud Computing, Cloud Security, Computer Security, Cryptocurrency, Cryptography, Cyber-security, Cyber Defense, Cyber Operations, Cybersecurity, DevOps, Disaster Recovery, Firewalls, HUMINT, Information Assurance, Information Security, information security management, Information Technology, infrastructure as a code, Intelligence, Interviewing Skills, Investigation, Leadership, Management, microsoft azure, Military Experience, Networking, Network Security, NFT Smart Contracts, Operational Planning, Product Security, Program Management, Project Management, Report Writing, Risk Management, Security Controls, security information and event management (siem), Security Management, Security Operations Center, Strategic Planning, Team Building, Threat & Vulnerability Management, Threat Intelligence, Vulnerability Assessment, Firearms, Microsoft Office, National Intelligence, Combat, Physical Security, Threat & Vulnerability, Kali Linux, Maltego, Nmap, EnCase, Secure Network Architecture, Counterterrorism, Microsoft Excel, Research, Analysis, PowerPoint, Security Clearance, Force Protection, Homeland Security, Army

About • FinTech infosec executive experience for crypto and digital securities.

• Blockchain security specialization, with further research under PhD program.

• DevOps management and technical experience around SDLC's and automated CI/CD pipelines.

• Cloud Security Certifications for AWS | Azure | GCP.

• Cylance, Carbon Black, Palo Alto XDR, SentinelOne, Crowdstrike, and Windows Defender ATP training and certifications.

• Chronicle, Splunk, Microsoft Sentinel, Devo, and Greylog service ownership and automation oversight.

• Master of Science Degree in Cyber Security, University of Dallas.

• Bachelor of Arts Degree in Security Management, American Military University