Experience

Our knowledge

Technical and highly credentialed

As a lifelong pen tester, Matt has years of hands-on experience finding security weaknesses in widely used applications and complex networks. He has built environments in major cloud platforms and has knowledge of leading technologies related to Identify and Access Management (IAM), Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), and more.

Matt's active certifications include CPA, CISSP, and CISA.

What we KNOW WELL

Compliance Expertise

SOC 2

Matt maintains active CPA licenses in multiple states and has worked with multiple CPA firms, including more than a decade of experience with a Top 50 CPA firm with a focus on audits and attestations.

ISO 27001

Matt is an accredited ISO/IEC 27001 Lead Auditor and has worked with many international clients, and has led EMEA based service delivery teams.

PCI-DSS

Matt has worked with multiple Qualified Security Assessor (QSA) companies and has been evaluating clients’ programs around cardholder security for nearly 20 years. In this time, he has held many PCI related certifications including Qualified Security Assessor (QSA), Approved Scanning Vendor (ASV), and PCI Forensic Investigator (PFI).

FedRAMP

Over the last 10 years, Matt has been a leader in one the most prominent FedRAMP © third-party assessment organizations (3PAO). He has been involved in hundreds of FedRAMP assessments with leading cloud service providers.