Kim Hansen

Sammendrag

Kim er Systemarkitekt med et spesielt fokus på sikkerhet og forebyggende mekanismer, gjennom implementering av beste praksis basert på retningslinjer og rammeverk som CIS/NIST. Han har mer enn 20 års erfaring innen IT og sikkerhet – hovedsakelig innenfor design, implementering og revisjon av nettverksinfrastruktur, samt gjennomgang og implementering av sikkerhetsløsninger. Kim jobber til daglig med oppgaver rundt sikkerhet og skyprosjekter innen offentlig og privat sektor, der hovedfokuset er synlighet og kontroll på forretningskritiske applikasjoner og systemer. Kim er positiv av natur, samvittighetsfull, følger opp prosjektene til de er ferdige og ser alltid fram til en god utfordring.

Fagområder

  • Cybersikkerhet

  • Cloud Infrastruktur

  • Systemintegrasjon

  • Nettverk

  • Sikkerhetsrammeverk

  • Virtaliseringsplattformer

  • E-postsikkerhet

Kompetanse

Produsenter: Palo Alto Networks, Rubrik, Veeam, Nutanix, Center for Internet Security (CIS), Duo Security, SecurEnvoy, WatchGuard, Ipswitch, Tenable, Delinea, Yubico

Nettverk: F5 BigIP, Extreme Networks, Cisco Switching, HPE Aruba Clearpass, Ipswitch WhatsUp Gold, Palo Alto Next Generation Firewall

Infrastruktur: Microsoft Active Directory (AD), Microsoft Active Directory Federation Services (ADFS), Microsoft Exchange, Microsoft PKI (ADCS), Microsoft Azure AD

Skyplattformer: Microsoft Office 365, Microsoft Azure AD, Microsoft Azure, Amazon AWS, Microsoft Intune

Sikkerhet: Palo Alto Networks Cortex XDR, Palo Alto Networks Cortex XSOAR, Palo Alto Networks Prisma Cloud, Palo Alto Networks Next Generation Firewall, Palo Alto Networks Prisma Access, Tenable.io, Tenable.sc

E-postsikkerhet: Proofpoint, Symantec Mail Gateway, Ironport

Kodespråk: Terraform, Azure Devops

Sikkerhetsrammeverk: CIS Critical Security Controls, NIST Cyber Security Framework (CSF), NSMs Grunnprinsipper for IKT Sikkerhet, IMO guidance, Center for Internet Security (CIS) Benchmarks

Virtaliseringsplattformer: Nutanix AOS, VMware vSphere, Microsoft HyperV, VMware NSX-T, VMware NSX-V

Backup and Recovery: Rubrik Cloud Data Management, Veeam Backup & Replication

PAM Solutions: Delinea Secret Server

Hardware: Dell Wyse

Sertifiseringer

  • GIAC Defensible Security Architecture (GDSA)

    GIAC (Global Information Assurance Certification)

    Gjennomføringsår: 2023

  • Prisma Certified Cloud Security Engineer (PCCSE)

    Palo Alto Networks

    Gjennomføringsår: 2023

  • GIAC Response and Industrial Defense (GRID)

    GIAC (Global Information Assurance Certification)

    Gjennomføringsår: 2023

  • Palo Alto Networks Micro-Credential for Remote Security Support Engineer (PMRS)

    Palo Alto Networks

    Gjennomføringsår: 2022

  • GIAC Certified Forensic Examiner (GCFE)

    GIAC (Global Information Assurance Certification)

    Gjennomføringsår: 2022

  • Palo Alto Networks Micro-Credential for Cloud NGFW Administrator (PMcNA)

    Palo Alto Networks

    Gjennomføringsår: 2022

  • Palo Alto Networks Micro-Credential for Virtual Network Security Administrator (PMvNA)

    Palo Alto Networks

    Gjennomføringsår: 2022

  • Palo Alto Networks Micro-Credential for Kubernetes Network Security Administrator (PMkNA)

    Palo Alto Networks

    Gjennomføringsår: 2022

  • Palo Alto Networks Certified Detection and Remediation Analyst (PCDRA)

    Palo Alto Networks

    Gjennomføringsår: 2021

  • Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)

    Palo Alto Networks

    Gjennomføringsår: 2021

  • Palo Alto Networks Certified Network Security Administrator (PCNSA)

    Palo Alto Networks

    Gjennomføringsår: 2021

  • Palo Alto Networks Micro-Credential for Remote user Administrator (PMRuA)

    Palo Alto Networks

    Gjennomføringsår: 2021

  • Sikkerhetsklarert i Norge og Nato

    Nasjonal sikkerhetsmyndighet

    Gjennomføringsår: 2020

  • GIAC Critical Controls Certification (GCCC)

    GIAC (Global Information Assurance Certification)

    Gjennomføringsår: 2019

  • Palo Alto Networks Certified Network Security Engineer (PCNSE)

    Palo Alto Networks

    Gjennomføringsår: 2017

  • GIAC Continuous Monitoring Certification (GMON)

    GIAC (Global Information Assurance Certification)

    Gjennomføringsår: 2017

  • GIAC Penetration Tester (GPEN)

    GIAC (Global Information Assurance Certification)

    Gjennomføringsår: 2016

  • Palo Alto Networks Certified Network Security Consultant (PCNSC)

    Palo Alto Networks

    Gjennomføringsår: 2018

  • VMware Certified Implementation Expert - Network Virtualization (VCIX-NV)

    VMware

    Gjennomføringsår: 2016

  • GIAC Certified Incident Handler (GCIH)

    GIAC (Global Information Assurance Certification)

    Gjennomføringsår: 2015

  • VMware Certified Professional - Network Virtualization (VCP-NV)

    VMware

    Gjennomføringsår: 2015

  • VMware Certified Professional 6 - Network Virtualization (VCP6-NV)

    VMware

    Gjennomføringsår: 2015

  • Double VCP-DCV & VCP-NV (VCP-DCVNV)

    VMware

    Gjennomføringsår: 2015

Kurs

  • SANS Amsterdam January 2022 - FOR500: Windows Forensic Analysis

    FOR500 builds in-depth and comprehensive digital forensics knowledge of Microsoft Windows operating systems by analyzing and authenticating forensic data as well as track detailed user activity and organize findings. It teaches students to apply digital forensic methodologies to a variety of case types and situations, allowing them to apply in the real world the right methodology to achieve the best outcome.

    SANS Institute

    Gjennomføringsår: 2022

  • SANS Stockholm September 2022 - ICS515: ICS Visibility, Detection, and Response

    ICS515: ICS Visibility, Detection, and Response will help you gain visibility and asset identification in your Industrial Control System (ICS)/Operational Technology (OT) networks, monitor for and detect cyber threats, deconstruct ICS cyber attacks to extract lessons learned, perform incident response, and take an intelligence-driven approach to executing a world-leading ICS cybersecurity program to ensure safe and reliable operations.

    SANS Institute

    Gjennomføringsår: 2022

  • SANS London December 2020 - SEC588: Cloud Penetration Testing

    SEC588 will equip you with the latest in cloud-focused penetration testing techniques and teach you how to assess cloud environments. The course dives into topics like cloud-based microservices, in-memory data stores, serverless functions, Kubernetes meshes, and containers, as well as identifying and testing in cloud-first and cloud-native applications.

    SANS Institute

    Gjennomføringsår: 2020

  • SANS Cyber Defense Initiative 2018 - SEC566: Implementing and Auditing CIS Critical Controls

    In SEC66, students will learn how an organization can defend its information by using Version 8 of the CIS Critical Controls updated in May 2021. Students will also learn how to merge security control requirements defined by NIST SP 800-171 and the Cybersecurity Maturity Model Certification (CMMC) into a cohesive strategy to defend their organization while complying with industry standards.

    SANS Institute

    Gjennomføringsår: 2018

  • VMware NSX: Troubleshooting and Operations [V6.2]

    This five-day, hands-on training course provides you with the advanced knowledge, skills, and tools to achieve competence in operating and troubleshooting the VMware NSX® 6.4 environment. In this course, you are introduced to several operational, management, and troubleshooting tools. You will be presented with various types of technical problems, which you will identify, analyze, and solve through a systematic process.

    VMware

    Gjennomføringsår: 2017

  • VMware NSX: Design and Deploy [V6.2]

    This course prepares students to lead VMware NSX™ design and deployment projects by giving them an understanding of general design processes and frameworks. Students look at the design and deployment considerations for network virtualization as part of an overall software-defined data center design.

    VMware

    Gjennomføringsår: 2017

  • SANS Cyber Defense Initiative 2017 - SEC545: Cloud Security Architecture and Operations

    SEC545 cover the critical concepts of cloud policy and governance for security professionals. We’ll learn about the Cloud Security Alliance framework for cloud control areas, then delve into assessing risk for cloud services, looking specifically at technical areas that need to be addressed. The course then moves into cloud architecture and security design, both for building new architectures and for adapting tried-and-true security tools and processes to the cloud.

    SANS Institute

    Gjennomføringsår: 2017

  • SANS Cyber Defense Initiative 2017 - MGT433: Managing Human Risk: Mature Security Awareness Programs

    Learn the key lessons and the roadmap to build a mature awareness program that your workforce will love and that has an impact you can measure.

    SANS Institute

    Gjennomføringsår: 2017

  • VMware NSX Ninja Training

    This 2-week training program prepares technical experts for the highest level of Network Virtualization certification – the VMware Certified Implementation Expert and VMware Certified Design Expert.

    VMware

    Gjennomføringsår: 2016

  • SANS Security West 2016 - SEC560: Network Penetration Testing and Ethical Hacking

    SEC560 prepares you to conduct successful penetration testing and ethical hacking projects.

    SANS Institute

    Gjennomføringsår: 2016

Kim Hansen

[email protected]