Speak to a world-class expert now.
1-800-FOR-KKAI (1-800-367-5524)
info@kkai.com
PrimeTrack® Instant Conferencing
PrimeTrack® Project Management System (patent pending)
EXPERTISE AND SERVICES
Information Security Expert, Information Security Architect and Consultant, Internet Security Specialist, Information Technology Consultant, Forensic Investigation and Analysis, Patent Infringement Expert Witness Testimony, Engineering Consulting ServicesPRINCIPAL INDUSTRIES SERVED
Internet Security, Information Security, Legal
EDUCATION
Graduate Studies, Mathematics, Indiana University
B.S., Computer Science & Mathematics, Ball State University
PROFESSIONAL EXPERIENCE
Consultant, Kevin Kennedy & Associates, Inc.
Providing information security expertise, information security architecture, internet security, forensic investigation and analysis, patent infringement expert witness testimony, and related expertise to a wide variety of clients.
Speak to this experienced, world-class expert now.
For additional or different expertise, browse other top-level expert resumes in Expert Testimony, Failure Analysis, Manufacturing Optimization, KKAI's Center for Rapid Response Engineering® Solutions and a host of other Engineering and Scientific Consulting services.
Learn how KKAI assembles expert teams of any size or skill set combination to meet our clients' needs on a rapid-response basis - no matter how complex the challenge.
Or, peruse our 325 case studies or 475 other expert resumes.
Founder, information security consulting firm
Provided information security for businesses of all types and sizes. Assessed fund-worthiness of tech startups via staff interviews, assessments of blueprints and intellectual property, surveys of competitive landscapes. Recommended changes to strategy and roadmaps. Identified untapped markets. Served as expert witness. Assessed technology infringement claims. Prevented unwarranted theft of e-discovery materials. Improved the overall security posture. Produced business-compatible and -palatable security requirements. Defined and tracked security metrics. Met and exceeded best practices. Architected applications and infrastructure for long-haul stability, scalability and security. Published and enforced security policies. Achieved regulatory and industry compliance. Minimized outsourcing risks. Assessed technology risks associated with acquisitions and spinoffs. Reconciled rapid growth and security. Planned for regulatory and industry compliance. Positioned to attract world-class customers. Anticipated and understood customers' compliance and other security requirements. Architected for long-haul stability, scalability and security. Identified untapped market niches. Built effective roadmaps.
Senior Manager, Information Security, Amazon.com
Led team charged with responsibility for defining and driving information security diligence throughout the company. Responsibility encompassed customer data including that subject to compliance standards and international privacy laws; business data; financial data; merchant partner data including AOL, Target, Toys-R-Us; HP data including that subject to HIPM. Presented periodic security briefings to executive audit committee, to the primary risk insurers, and to other external entities as required. Defined security requirements for all human and machine touch points pertaining to highly sensitive customer information such as payment instruments, bank account numbers, taxpayer ids, credit scores. Defined and enforced all enterprise security policies. Initiated a top-to-bottom policy overhaul, resulting in a comprehensive framework tuned to exemplary standards. Weighed and ruled on all requests for policy exemption. Managed response efforts for high-severity security incidents. Initiated creation of Security Incident Response Plan. Drove continual and systematic improvements in system, network and application security. Identified and initiated operational improvements which simultaneously improved security. Performed technological due diligence for strategic acquisitions (including Alexa Internet, BookSurge, CustomFlix, and Mobipocket) and spinoffs (A9 and at least a dozen others, not all publicized). Instituted policies and means to constrain the duties and visibility horizon of more than a thousand overseas contractors. Facilitated internal security audits and managed engagements with independent world-class auditors and penetration testers. Assigned and tracked action items for each finding. Performed business-owner diligence. Instituted compulsory requirements for managing enterprise-wide logical access rights and privileges. Expended notable team resources to develop facilitative tools for managing the massive cartesian product of servers, server classes, people, roles and rights. Participated on the core defense team for six highly publicized lawsuits alleging patent infringement. Represented the company at meetings of the Pacific Northwest CISO Forum (PACCISO). Other companies represented included Microsoft, Nike, Washington Mutual, Starbucks, Nordstroms, Port of Seattle, Expedia, Alaska Airimes. Co-authored the company's open source software policies. Lobbied senior executives to liberalize portions of the policy that had previously precluded staff from publicly participating in open source projects.
Senior Manager, Associates Program, Amazon.com
Managed the technology team that powers Amazon.com Associates. Drove significant operational improvements surrounding a proprietary platform that renders billions of dynamic ad impressions annually. Instituted painstaking performance monitoring against internal SLAS. Managed the implementation and deployment of numerous revenue-generating features including Remote Buy Box, Quick Click BuyingTM, and Tiered Compensation. Drove wholesale redesign of the Associates Central extranet used by associates. This effort reduced six distinct extranets -- each with dedicated hardware, software, content, and configuration -- down to a single multi-lingual extranet now used by associates in all geographies. Stabilized the production launch of Amazon.com Web Services Version 1.0 by writing its operations and scaling plans. Architected the throttling mechanism which defends the service against abusers.
Senior Manager, Information Technology, Amazon.com
Was responsible at peak for an umbrella organization of fifty engineers on five teams. Hallmark accomplishments included construction of the automation framework which came to enable years of massive (nearly SOX) infrastructure scaling, and enabled wholesale migration from vendor UNIX to Unux. The migration yielded a first-year savings of 25% of technology expense.
Director, Security Engineering, Verlo Inc.
Wrote the business plan, architected and began construction of a national-scale managed firewall service based upon technology developed at NorthWestNet.
Manager, Security Engineering, NorthWestNet
Was responsible for inception of a suite of security service offerings with objectives to serve as a differentiator for bandwidth customers, to establish new revenue streams, and to boost the company's value for acquisition. Objectives were achieved by designing service offerings, hiring a team, establishing reseller agreements, forging alliances with key partners, including with Carnegie Mellon University CERT/CO; developing contractual agreements, writing software, producing market colateral, deploying infrastructure, facilitating the sales process in every way imaginable, and ultimately provisioning and serving customers. Customers spanned the gamut of industries: Internet commerce, brick-and-mortar retail, technology, insurance, health care, manufacturing, municipalities, higher education, professional sports. The managed firewall service predated and outclassed that of many competitors. Furthermore, it inspired a new product line for a publicly-traded firewall company.
Principal Software Engineer, Indiana University
Progressed from entry-level programmer to principal software engineer. Became the first staff member in university history, including the then-30-year old department of academic computing, to attain software engineer status. Authored hundreds of applications totaling more than a half million lines of code, some used by virtually all constituents. Acquired and applied advanced expertise in operating systems VAX/VMS, SunOS, Solaris, Ultrix, 0SF/i, IRIX, HPUX); TCP/IP networking; client/server paradigms; presentation layer protocols. Co-wrote popular open-source software for VMS, some later dual-licensed to DEC and several lSVs. Materialized an immediate $750,000 savings with one solo project lasting four weeks. By co-authoring the first usable POP3 email server for VMS, launched an historic shift at the university from centralized to distributed computing. Became de facto expert for black hat intrusions, inspiring a popular book on Internet Security. Trained at MIT for a successful large-scale deployment of Kerberos. These and other accomplishments lent steady public esteem to the university's technical prowess. That later influenced the university's election to host the lnternet2 NOC, a.k.a. Abilene.
Principal, Software firm
Managed consulting practice of technology experts serving Fortune 500 companies, public anc private universities, and research labs.
Software Engineer, Nuclear Measurements Corporation
Designed and developed critical software components of radiation monitoring systems. The company's customers included nuclear power plants, radioactive waste storage facilities, and defense-funded laboratories.
ADDITIONAL EXPERIENCE
PROFESSIONAL REGISTRATION
CISSP, Certified Information Systems Security Professional
HONORS AND AWARDS
National Dean's List, National Outstanding College Students
Sigma Zeta, National Science and Mathematics Honor Society
Phi Eta Sigma, National Freshman Honor Society
PROFESSIONAL AFFILIATIONS
lEN, INFOSEC Entrepreneurs Network (founder of this online group)
WSA, Technology Trade Association
PACCISO, Pacific CISO Forum
USENIX, Advanced Computing Systems Association
SANS, Systems, Audit, Network, Security Institute
Agora, Pacific Northwest security professionals
PUBLICATIONS
Author of a book on internet security and author of numerous publications related to internet security, security policies, designing network security, implementing internet security, and more.
Please note that this is an abbreviated CV. A fully detailed unabridged CV is available under special circumstances.
Following are links to the resumes of a select few of many KKAI Consultants, Engineers and Experts with related expertise.
Review the resumes below, or enter your search query (type of expertise you are seeking) in the box below, choose to search the entire Rapid-Response site or just resumes, then click the search button. Please note that the list of resumes available online is a select subset of our vast database. If your search of our site does not reveal the expertise you are seeking, please call us toll-free (in the U.S.) at 1-800-367-5524 or contact us for more information and we will gladly assist you in locating the specific expertise you require.
| Information Security Expert, Information Security Architect and Consultant, Internet Security Specialist, Information Technology Consultant, Forensic Investigation and Analysis, Patent Infringement Expert Witness Testimony, Engineering Consulting Services | |
| Resume of LKH | medical doctor, physician, accident and emergency medicine consultant, general medicine consultant, nursing home care consultant, forensic analysis investigation expert, consulting services |
| Resume of XYM | physician, internal medicine consultant, rheumatology health professional, biomedical scientist, immunology consultant, forensic investigation and analysis, medical and biomedical expert witness |
Have an urgent litigation support or engineering and scientific consulting need? Contact KKAI now for world-class, expert rapid response.
1-800-FOR-KKAI (1-800-367-5524)
info@kkai.com
BACK TO THE TOP OF THIS PAGE
Kevin Kennedy & Associates, Inc.
Rapid Response Engineering® Solutions
3905 Vincennes Road, Suite 320
Indianapolis, Indiana 46268
(317) 536-7000 voice
(317) 536-7220 fax