Jason Mortensen, CISSP, CISM
IT Security Professional
Jason Mortensen, CISSP, CISM
IT Security Professional
Phoenix Arizona Area
- resume [at] themortensens [dot] com
- View LinkedIn profile
I am an IT security professional with over 20 years of experience. My career objective is to work as a senior information security expert with a technical focus. My ideal work environment allows me to be a bridge between technical and non-technical teams, and to solve real-world business problems through the application of technical skills, creativity, and hard work.
My experience and interests are in the areas of corporate IT security, web application security, and information risk management.
Skills
- Corporate Information Security
- Information Risk Management
- Web Application Security
- Information Security Architecture
- Vendor Security Risk Management
- Firewalls and TCP/IP Networking
- Authentication
- Identity and Access Management
- Public Key Infrastructure
- IT Training
- Linux and Windows Administration
- PHP Programming
- Incident Response
- Penetration Testing
- Creative Problem Solving
- Written and Verbal Communications
Professional Experience
Lenovo, Inc
October 2014 to Present
Responsible for architecture, strategy, subject matter expertise, and project management for a wide range of IT security projects. Demonstrated technical leadership in key projects, including web security scanning and penetration testing, bug bounty program, cloud security risk assessments of third party vendor, incident response, authentication, and Public Key Infrastructure (PKI). Experience in developing and presenting security training materials, development of technical standards and practices, and creation of security strategies and roadmaps.
Motorola Mobility, LLC
August 2000 to October 2014
Subject matter expert responsible for security architecture, strategy, and project management. Provided technical leadership in key projects, including web application security, vendor risk assessments, security evaluation of Software as a Service (SaaS) providers, security scanning, cloud security, Identity and Access Management, Service Oriented Architecture, authentication strategy development and execution, and Public Key Infrastructure. Experience in developing and presenting security training materials, development of technical standards and practices, and creation of security strategies and roadmaps.
Motorola, Inc.
February 1998 to August 2000
Responsible for administration of Unix-based web and LDAP servers, and for development of Intranet web applications. Experience with web server configuration and maintenance, web page design and programming, shell scripting, web security, and process documentation.
Knollmiller & Arenofsky, LLP
December 1991 to February 1998
Responsible for the installation, configuration, troubleshooting, and support of all computer hardware and software. Network administration of Windows, Novell, and Linux servers, and with Windows-based workstations.
Education
Arizona State University
- Bachelor of Science
- Major: Computer Information Systems
- Graduated Cum Laude
Technical Certifications
- (ISC)2 Certified Information Systems Security Professional (CISSP)
- ISACA Certified Information Security Manager (CISM)
- GIAC Certified Incident Handler (GCIH)
- GIAC Web Application Penetration Tester (GWAPT)
- GIAC Defensible Security Architecture (GDSA)
- GIAC Security Essentials Certification (GSEC)
- CompTIA Inet+ Internet Professional
- CompTIA Network+
- CompTIA A+ Technician
