Cybersecurity and Infrastructure Security Agency

Spearheaded the role of Technical Product Owner for DHS/CISA, successfully establishing a roadmap that transitioned Crossfeed from a proof of concept to a robust production system, enabling support for a minimum of 6k concurrent users. 

Prepared FY2024H2 and FY2025 Crossfeed Technical Product Roadmap applying an Agile Quarterly Release Cycle.
>  Identified vital goals and objectives, established initiatives within budget requirements, and secured leadership buy-in.
>  Applied Agile, Scrum, and Waterfall project management methodologies according to the project needs.
>  Coordinated and led cross-functional teams of 10-12 engineers implementing new code, refactoring, and enhancing existing code, code standardization, performance improvement, and security enhancements.
>  Assisted DevOps and Engineering Leads in creating GitHub issues aligned with ServiceNow artifacts.

Designed a new application database and table schema to support new online, interactive reporting features to ensure responsiveness and long-lasting value.

Prepared a Crossfeed centralized product and project hub for collaboration and communication, meetings, and files for all internal communications related to the Crossfeed activities.
>  Crossfeed hub became the template for all new hubs for the ASM/ATC teams leveraging Microsoft Office 365.

An early adopter of ServiceNow Agile Management | Strategic Portfolio Management tracking system.
>  The Crossfeed project was the inaugural agile project managed in ServiceNow. 
>  Tested and implemented project tracking methodology. 
>  Prepared and documented standards for all to utilize moving forward.

Technical Product Owner | Automated Capabilities

U.S. Department of Homeland Security

Cybersecurity Service appointment to Cybersecurity and Infrastructure Security Agency (CISA) | Attack Service Management (ASM) | Automated Testing Capabilities (ATC)

Cybersecurity Service

Proficio

Served as Qualys Enterprise subject matter expert for Proficio, the inventor of SOC-as-a-Service, automated threat response, and cybersecurity business intelligence. Reported to the Director of Risk-Based Vulnerability Management (RBVM). Liaised with Proficio vulnerability management support personnel in the US, Spain, and Singapore.

•	  Performed Proficio Risk-Based Vulnerability Management (RBVM) New Client Onboarding tasks and liaised with customers’ core Production Infrastructure, Data Platform, Information Technology, and Information Security teams.
•	  Supported Proof of Concept deployments and troubleshooting with vendor for Qualys Patch Management Automation and Qualys Container Security for GitHub Repositories, identifying critical design flaws.
•	  Performed in-depth analysis and troubleshooting on all Qualys trouble tickets for Proficio RBVM customers.
•	  Enhanced Proficio RBVM services with new dashboards for all clients, providing enriched asset insights.
•	  Focused on collaboration, innovation, creative problem-solving, building and maturing repeatable reporting and data visualization processes, and always advocating for our customers.

Senior Vulnerability Intelligence Engineer (Consultant) 

Qualys

⧫  Interim Technical Product Manager, Threat Research Unit (TRU), 05/2022 – 12/2022
⧫  Principal Business Analyst, Threat Research Unit (TRU),  03/2022 – 12/2022
⧫  SA/SME Dashboards & Reporting, 06/2019 – 05/2022
⧫  Product Manager, Reporting, 10/2017 – 05/2022

Provided global technical expertise in Security Engineering and Operations. Proposed and architected integrations and solutions to satisfy customer requirements based on Qualys Cloud Suite capabilities. Engaged with Product Management, Engineering, and User Experience teams to define and deliver customer use cases and feature requests. Translated feature requests into design and engineering requirements. Improved workflow to/from Qualys R&D Lab environment specifically for TRU.

•  Collaborated with Marketing and Web Teams to promote TRU initiatives: Workshop Wednesday, Threat Thursday, and Patch Tuesday webinars and blogs.
•  Orchestrated new Qualys Identifier (QID) title standards to improve consistency and enrich Unified Dashboard Framework (UDF) character string search results within Qualys Query Language (QQL).
•  Prepared 2023 Quarterly TRU Jira Epics/User Stories for Vulnerability/Signature Engineering teams. 
•  Advocated on behalf of my customers; Amplified customer feedback and worked closely with engineers to highlight high-priority issues frustrating users; The improved customer experience stimulated positive customer satisfaction feedback and a new, positive uptick in metrics.
•  Boosted customer satisfaction by reducing the backlog of customer cases/requests by 65%+ in 45 days. Instituted a standardized and repeatable triage process to maintain and measure the same.
•  Enabled department operations by performing technical analysis, defining roles, creating process frameworks, and improving departmental efficiencies.
•  Nurtured customer success by coaching customers in leveraging product data using external tools and documenting engineering difficulties. Ensured customers felt understood.

Multiple Concurrent Remote Roles as Detailed in Description

Interim Technical Product Manager, Threat Research Unit (TRU)

Principal Business Analyst, Threat Research Unit (TRU)

Solutions Architect / Subject Matter Expert (SA/SME), Dashboards and Reporting

Product Manager, Reporting

PlayStation

Served as internal information security, regulatory compliance, and vulnerability management subject matter expert to an interactive and digital entertainment company, Sony Interactive Entertainment.  At Sony Interactive Entertainment, "we create the PlayStation family of products and services that drive your imagination and ignite your sense of adventure."

Reported to Security Governance, Risk, and Compliance department. Conducted all system-related security risk and vulnerability management projects and plans. Liaised with Core Production Infrastructure and Data Platform and Corporate Information Technology teams in the US, EU, India, and Japan. 

• Consistently achieved objectives by working closely with the executive team, proactively strategizing for and planning for forecasted needs. 
• Reduced total active vulnerabilities by 53% and reduced false positives by 28% by overseeing complex process improvement projects.
• Reduced fiscal active vulnerabilities by 58% and false positives by 21% thru a significant reporting project.
• Expanded internal and external inventory tracking of 100K+ assets by leading the Regional Transformation to Global Function project. 
• Completed Qualys/Splunk enterprise integration and first of four (4) development Potentially Shippable Increments (PSIs) toward Vulnerability Management/QlikView Extract Transform Load (ETL) Automation Project.

Senior Security Analyst, Vulnerability Mgmt

Dick's Sporting Goods

⧫ Lead Security Analyst: Cyber Security, Threat/Vulnerability Risk Mgmt., Compliance (05/2012 – 02/2014)
⧫ Lead Security Analyst Consultant (BEACON HILL STAFFING GROUP) (09/2011 – 05/2012)

Hired full-time following outstanding performance as Lead Security Analyst Consultant under Beacon Hill. Accountable to the department of Risk & Compliance; individual contributor and pragmatic technical professional in Information Security Compliance and Privacy Team. Internal information security consultant and vulnerability management subject matter expert. Reviewed system-related security projects and liaised with Information Technology Infrastructure, Application Development, and Web/Mobile Application Development teams. Managed vendor/user relationships. 

•	  Information Security Excellence Award, Inaugural Recipient, awarded by VP, Information Security
•	  Developed and spearheaded a formal Total Vulnerability Management Program (TVMP) enterprise charter.
•	  Identified and remediated vulnerabilities and tracked metrics reporting by engineering formal TVMP with multiple scanning technologies. 
•	  Engineered repeatable processes and metric methodologies for internal participants by creating a Risk Acceptance SharePoint repository and tracking solution. 
•	  Leveraged experiential knowledge to perform a high-level analysis of open issues and audit findings; developed and monitored appropriate metrics, identified trends, and measured progress.

Lead Security Analyst: Cyber Security, Threat & Vulnerability Risk Management and Compliance

CVS/Caremark

Senior Risk and Compliance Management Consultant

VOYAGER GROUP, LP

Director, Technology Services

•   PCI Compliance Project Team Award, awarded by Manager, Information Security Risk Management

Senior Project Manager, Risk, and Compliance Management Consultant

Del Monte Foods, Inc.

Senior Technical Infrastructure Architecture Analyst

Supervisor, Technical Infrastructure Computer Operations

At the U.S. Cybersecurity and Infrastructure Security Agency (CISA), I served as a Technical Product Owner, driving the transformation of the Crossfeed application from prototype to a scalable production platform capable of supporting thousands of concurrent users. Partnering with a team of exceptional engineers and cloud developers, we leveraged Agile, Scrum, and Waterfall methodologies to deliver ambitious goals on aggressive timelines. This collaboration not only showcased our collective expertise but also underscored my strengths in strategic planning, cross-functional leadership, and technical acumen.

Previously, as a Senior Vulnerability Intelligence Engineer at Proficio, I specialized in leveraging Qualys Enterprise to strengthen client security postures through seamless onboarding and integration. My contributions were driven by a commitment to innovation and operational excellence, ensuring effective cybersecurity strategies that enhanced overall resilience.

𝙈𝙮 𝙄𝙙𝙚𝙖𝙡 𝙒𝙤𝙧𝙠 𝘾𝙪𝙡𝙩𝙪𝙧𝙚:

✅ 100% Remote & Trust-Based – I am seeking a role where results matter more than time spent at a desk.
✅ Collaborative, Yet Autonomous – A team-focused culture where I am empowered to contribute meaningfully while being an individual contributor.
✅ Clear Communication & Leadership – No corporate jargon, no fluff—just real conversations and decisions based on logic.
✅ Supportive & Mission-Driven – A place where advocacy for customers, peers, and the greater good is valued, not just words in a mission statement.
✅ High Standards, No Perfectionism Paralysis – A culture where doing great work is expected, but not at the cost of over-engineering or never delivering.

Let’s connect! #Looking4FullTimeWFH

Seeking 100% Remote Work • Senior Information Technology BA • Senior Technical BA • Senior Technical Professional • Senior Information Technology Security Analyst • Senior Software Reference Solutions Architect

Taplio

DEBRA M. FEZZA REED's Linkedin Analytics

DEBRA M. FEZZA REED

Want to drive more opportunities from LinkedIn?