Nick Gross

IT Risk & Compliance Specialist • Security Analyst • Senior Security Engineer • Head of Security. Expertise in Vulnerability Assessment, Penetration Testing, Regulatory Compliance, and Cybersecurity Strategy. Proven track record in mitigating risks, architecting solutions, implementing customized security measures, conducting audits, identifying weaknesses, supporting global users, incident response, and optimizing performance.

Product Security Consultant - Rapid 7

(2025-01 - 2026-06)

• Evaluate information technology architecture within customer environments across a broad range of industries and proportions to deploy Rapid 7 products, and advise on security best practices within the scope of these products including Insight Vulnerability Management (IVM), Insight Incident Detection & Response (IDR), and Insight Connect (API integration)
• Document and communicate design & implementation details to customer end users
• Automate and customize solutions to enable customers to use Rapid 7 products more efficiently via API scripting, reporting, and custom dashboard development
• Support sales teams by providing enablement on available offerings and by providing scoping assistance during the sales cycle
• Generate, maintain, and deliver R7 internal enablement materials to team members and cross-functional R7 partners, as well as team infrastructure, internal processes, tooling, and collateral

Product Security Consultant - Miller Jones (contractor for Rapid 7)

(2023-01 - 2025-12)

• Evaluate information technology architecture within customer environments across a broad range of industries and proportions to deploy Rapid 7 products, and advise on security best practices within the scope of these products including Insight Vulnerability Management (IVM), Insight Incident Detection & Response (IDR), and Insight Connect (API integration)
• Document and communicate design & implementation details to customer end users
• Automate and customize solutions to enable customers to use Rapid 7 products more efficiently via API scripting, reporting, and custom dashboard development
• Support sales teams by providing enablement on available offerings and by providing scoping assistance during the sales cycle
• Generate, maintain, and deliver R7 internal enablement materials to team members and cross-functional R7 partners, as well as team infrastructure, internal processes, tooling, and collateral

Security Engineer - Avaya - Charlotte, NC

(2014-01 - 2023-12)

• Designed and implemented enterprise cloud and co-location security solutions
• Maintained SIEM reviewing daily logs and alerting
• Collaborated with GRC, Internal Audit, and IT teams to define security best practices using CIS, NIST benchmarks and guidelines
• Performed gap analysis and assisted in identifying risk appetite
• Reviewed vulnerabilities and recommended remediation plans with teams
• Collaborated with dev-ops teams to ensure code was hardened to OWASP recommendations
• Conducted information security risk assessments to identify potential risks and develop targeted strategies to mitigate those risks
• Active stakeholder in compliance audits. Ensured IT teams provided proper evidence auditor required including penetration testing, vulnerability scans, logging, and security polices
• Provided security metric reports to executive leadership/management

Network Engineer - Wells Fargo - Charlotte, NC

(2011-01 - 2014-12)

• Designed, implemented, maintained, and troubleshot essential computer networks, including routers, switches, firewalls, servers, and other networking equipment
• Improved network infrastructure reliability, efficiency, and security
• Monitored network performance, identified and resolved issues, and implemented upgrades
• Installed network security protocols to protect the organization from external threats
• Collaborated and liaised with other IT professionals and end-users

Voice Engineer - Wells Fargo

(2006-01 - 2011-12)

• Supported over 3,000 worldwide users with innovative solutions fulfilling unique industry needs
• Provided Tier 4 production support for critical systems
• Led testing and certification efforts for IP technology to optimize performance and reliability
• Designed and implemented targeted enterprise technology solutions to drive business success
• Reduced expenses while upgrading systems by leading cost reduction projects
• Delivered top-tier voice engineering support to global clients by remaining knowledgeable on the unique challenges within financial markets