Jason S. Lazerus

• Sets and executes infrastructure and support strategies. This includes the development of the strategy, architecture, and design for the entire infrastructure stack across the enterprise.
• Responsible for the security design of all infrastructure implementations, subject matter expert to contribute to analysis and design of all technology systems at the Bank.
• Works with business unit and technology constituents to lead the selection and implementation of software and services to provide a highly functional and secure operating environment.
• Responsible for managing a staff of technical professionals to develop and implement strategic solutions. This includes the server, network, and security infrastructure teams.
• Leads complex and inter-related projects collaborating with resources from multiple areas of the corporation, makes key strategic decisions on those projects, and ensures that those projects are completed on time and within budget.
• Develop and execute remediation plans for regulatory, audit, and risk-based technology reviews.
• Maintains contracts with external vendors.
• Monitors the reliability of systems and services.
• Interfaces with business units to ensure needs and SLAs are met.
• Lead response for significant system and application outages or issues.

• Manages high-performing cyber security professionals in Incident Response, Information Assurance, Security Engineering and Identity and Access Management.
• Meets with auditors regularly to ensure compliance with regulations and internal policies.
• Manages security budget.
• Evaluates and purchases products and services to meet security goals.
• Drives security initiatives, leads projects, and improves processes.
• Tunes and configures security tools to maximize the effectiveness of time and detection of incidents.
• Conducts periodic lunch and learn training sessions.

• Manages SailPoint IDN Build Team. Current project ongoing to implement SailPoint IDN.
• Manages Public Key Infrastructure.
• Configures Azure SSO for SAML authentication.
• Responds to cyber security incidents.
• Writes scripts in PowerShell and Python to improve efficiency and manipulate data.
• Creates Splunk queries, alerts and dashboards.

• Managed a team of three high-performing cyber security professionals.
• Met with auditors regularly to ensure compliance with regulations and internal policies.
• Evaluates and purchases products and services to meet security goals.
• Drives security initiatives, leads projects, and improves processes.

• Oversees the vulnerability management program.
• Collaborates with several teams and vendors to ensure remediation or mitigation is achieved.
• Created automated methods for ticket creation and handling.
• Creates and monitors CIS security baselines for all network devices.
• Works with risk management to document exceptions.

• Performs SAST and DAST code scanning for all code developed for Eastern Bank internally and by third parties. (Java, JavaScript, PowerShell, Python, PHP, HTML)
• Reviews findings to ensure no false positives are found and works with developers to mitigate true positives.

• Coordinates incident response efforts.
• Response to cyber security alerts generated by numerous sources.
• Created automated workflows to enhance the response time to incidents.
• Monitors SIEM and creates new alert methods as necessary.

• Created and manages the digital forensics program.
• Captures hard drive and memory images during investigations.
• Works with third parties as necessary to ensure investigations are completed in a forensically sound method.

• Writes scripts in PowerShell, Python and Java to gather and push data via numerous APIs.
• Uses Gitlab and code collaborator to store, share and review code with co-workers.
• Uses CI/CD tool to automate script executions.
• MajorDomo role for Domo business intelligence platform.
• Creates ETLs and SQL scripts to transform data as needed.

• Oversaw the vulnerability management programs.
• Managed security related projects; provided security advice and architecture design for all technology projects.
• Provided penetration testing on a regular basis.
• Responded to cyber security alerts; monitored SIEM and created new alert methods.
• Implemented new firewall infrastructure; created site-to-site VPNs with vendors.
• Managed Checkpoint endpoint security system.
• Served as the HIPAA Security Officer; performed regular audits.
• Implemented and managed VMware and Hyper-V environments.
• Managed medical records SQL databases and R25 Scheduling Oracle database.
• Created policies and procedures for cyber security and HIPAA regulations.

• Provided first line support to a large domain of over 10,000 users. Fielded over 2,000 calls/month.
• Worked with vendors to design the single sign-on system.
• Redesigned Information Technology website (HTML and CSS).
• Upgraded and managed Unicenter Service Desk ticketing system.
• Implemented and managed ACD call recording system.

Founded and lead a technology company developing the Pocket suite of enterprise mobile applications. Products include PocketOps (CDN management), PocketSOC (security operations), PocketNOC (network operations), PocketVM (vulnerability management), PocketIntel (threat intelligence), and PocketSync (data synchronization). Built on Swift, TypeScript, and Cloudflare Workers. Also develops open-source Home Assistant integrations and custom Terraform providers for infrastructure-as-code workflows.

• Managed 125 volunteers and employees.
• Created policies and procedures.
• Performed Incident Command in numerous situations.
• Coordinated response efforts during major emergencies.
• Created and monitored key performance indicators.

• Chairman of the board of directors.
• Negotiated budget with multiple municipalities.
• Implemented electronic medical records system.

• Created EMT training program for new recruits.
• Provided trainings for driving, CPR, and CEVO.
• Created continuing education program for EMS providers.

• Providing emergent care to patients in Suffolk County.
• Communicating and coordinating care with physicians and nurses at various hospitals.
• Ensuring vehicles met Part 800 NYS DOH regulations.
• Provided safe transport for patients and crews.