CEH Scheme Committee

Joseph Juchniewicz is the Principal Senior Consultant for Calian Corp. With over 30 years of security experience, Mr. Juchniewicz provides high-level consulting services to customers. He focuses primarily on information security, including the design and implementation of security solutions, conducting security assessments, as well as assisting with the alignment of operational procedures with information security best practices. He has extensive experience in vulnerability and penetration testing, social engineering, physical security assessments, investigations, incident response, and computer forensics. Mr. Juchniewicz serves on several college cybersecurity and industry advisory boards.

Steve Petrie is a Senior Cybersecurity Engineer at COLSA Corporation with over 30 years of experience in the information technology field. He provides high-level technical services for the Department of Defense and various commercial entities. He has experience providing technical security assessments, physical security assessments, vulnerability and penetration testing. Mr. Petrie holds a BS in Information Technology and currently holds several certifications including CEH, CHFI, ECSA, OPST, and CISSP.

Anthony is the Technical Information Security Officer at the leading partner in delivering the best IT and Security Services in Singapore's Healthcare Industry. where he is responsible for leading, animating, and implementing the Data and Cybersecurity programs for the National Healthcare Project nationwide. Anthony brings with him over 20 years of IT and Cyber experience, with major cybersecurity certifications, including CEH. He is an active community volunteer and regularly shares good security practices, contributes to the development of the cybersecurity profession across Singapore and the APAC region, and creates a cyber-aware ecosystem that enables a safe and secure cyberspace for everyone.

Kris Thomas is a cybersecurity professional with over 23 years of experience solving complex issues from strategy through execution, supporting critical Government systems and networks.
Mr. Thomas’ background ranges across a security spectrum of capabilities including cybersecurity strategy and governance, cyber risk management, systems engineering, and threat intelligence.

Mr. Gallardo has over 31 years of IT experience, including 21 years’ experience in applied security engineering, and seventeen years’ experience conducting certifications and accreditations (C&As) of systems and networks. He currently conducts security assessments and penetration testing for DoD and Federal systems, which involves analyzing the security architecture, conducting certification testing and vulnerability assessments, and determining security risks, in accordance with DoD and Federal regulations and guidelines.

Denis has over the past 36 years instigated , completed and delivered many assignments and contracts for Central and local Government, Defence, Financial and Legal clients and holds highest level government clearance. His background from working with working in the security directorates of the Foreign and Commonwealth Office, NATO ACO and MOD GOSCC has shaped his approach to security covering cyber/technical, physical and personnel in how they interact and affect each domain. He has experience in managing multinational team personnel both civilian and military from various technical disciplines including technical deployment teams (network, System Admins, Security teams). He has also audited and mentored SOC Analyst teams.
Providing budgetary oversight and justifications for operational and development projects, Denis is communicator with considerable experience of partner engagement at senior and middle levels with blue chip private sector companies, government departments, agencies, and regulators. He is able to communicate comfortably with clients and colleagues alike at all levels, from the technical to strategic.
Denis recognises that good security is threat-informed, through access to intelligence and engagement with those who own the threat picture. Denis has championed the building of information-sharing partnerships with other organisations at risk in order for the fast sharing of threat intelligence, comparison of security solutions and drawing upon peer knowledge. It is his considerable experience of reacting to fast moving events and crises, while also being able to design long term programmes and management build, that has allowed Denis to demonstrate some of his best work attributes in this field.

Shannon has a broad experience in work that encompasses many different areas of interest. Twenty-eight years of ministerial ministry, over 10 years of Retail Management, owned his own construction company and over fifteen years in the IA/ IT field. His IA/IT adventures start with the Dos system in a telephone company’s infrastructure to working with Telos Corp for over twelve years.
With Telos Corp, Shannon provides IA/IT related services, technical services, and system related documentation for satisfying security requirements and C&A of DoD automated information systems. He prepares certification documentation in accordance with the NIST, RMF, DCID & DHA; routinely provides input and comments to draft A&A documentation; supports, analyzes, and tests various DHA and Navy Medical local area networks for compliance with DoD, DHA, & Navy configuration policies. He serves as a team lead, where team leads are responsible for testing the security of various Navy Medical applications utilizing database, source code, and application scanning software. He is a member of EC-Council's Scheme Committee. Shannon has Security+ and CEHv6 certifications along with a verity of specialty courses in the IA/IT field.

Steve Lindley is the Information Security Officer and Director of Cybersecurity and Safety for the County of Sonoma where he oversees cybersecurity and public safety technical support teams. He has over 17 years of Information Technology and Cybersecurity experience in both the public and private sectors, and 19 years of experience working in the financial industry. Steve’s experience includes overseeing all aspects of information technology, cybersecurity, risk management, IT operations, budgeting, business continuity, and disaster recovery in highly regulated environments. Steve also holds numerous industry certifications including the EC-Council CHFI, ECSA, CEH, ECIH, and ECES certifications, and the CompTIA CSIE, CSAE, CASP+, PenTest+, CySA+, Security+, Network+, and A+ certifications. He has his B.S. in Cybersecurity and Information Assurance and is currently pursuing his MBA in Information Technology Management.

Tim joined the WWT Security Practice from Leidos, Inc. where he served as a Chief System Engineer, Cyber Research Analyst, and Cyber Operator. Prior to that, he spent over 20 years as a Unites States Marine and served a large part of it as a Communications and Information Systems Officer.
As a Consulting Systems Architect in Cybersecurity, his role is to focus specifically on leveraging WWT’s Security Portfolio to support the Public Sector Customers’ needs. Furthermore, he is tasked with driving innovative solutions for security and information technology at scale with WWT’s technology partners. He is the rimary author for WWT’s Integrated Endpoint Security Architecture and worked on a team to bring this solution market for customers.
Tim has a BS in Management Science & Information Technology with a focus on Decision Support Systems from Virginia Tech. His MS is in Operations Research/Analysis from the Naval Postgraduate School. His Doctorate is in Cybersecurity from Capitol Technology University in Maryland.

AnJanette Harris is a Cybersecurity SME for DOT’s Maritime Administration (MARAD) at Criterion Systems Inc. with over 20 years of IT experience. Her experience extends to providing security assessments (to include technical and physical security), policy guidance, privacy assessments, vulnerability testing, and regulatory compliance. AnJanette holds a BS in Computer and Information Science and a Masters in Cybersecurity and Information Assurance and currently holds several certifications including CEH, CNDA, Security+, Network+, CIPM, CIPP/E, and CISM.

Experienced cybersecurity consultant with a demonstrated history of working in the financial services industry. Active researcher in cybersecurity and editor in chief of the International Journal of Information Security Research (IJISR). Experienced in operating current industrial security tools such as HCL Appscan and Burpsuite resulting in a holistic security profile of the application under testing. I've also been a science communicator specialising in teaching physics but now I spend most of my time researching theoretical cybersecurity areas.

Danny Budhwa has nearly 20 years of experience in Information Technology and Cyber Security. Danny is currently the Head of Detection & Response for Saks OFF 5th where he is responsible for creating and managing the Security Operations, Incident Response, Threat Intelligence, Threat Hunting, Application & Cloud Security, and Cyber Security Education & Awareness Training missions. Danny has led and mentored global teams of Cyber Security Analysts in defending organizations from Cyber Threats. He holds a Master of Science in Cyber Security from Fordham University, 4.0 GPA, Bachelor’s Degree in Cyber Security & Digital Forensics, and certifications such as EC-Council’s Certified Ethical Hacker (CEH), EC-Council Certified Incident Handler (ECIH), CompTIA Advanced Security Practitioner (CASP), Security+, A+, Cisco Certified Network Associate (CCNA), CCNA Cyber Ops Associate, and ISACA Certified Information Security Manager (CISM).

Ioannis has vast industry and research exposure over 35 years under a unique mix of academic research, industrial, and DOE lab R&D experience in security. Ioannis has worked both in the private and public sectors with European, Middle East and Chinese companies. He has many years of experience in IT and IT security. He has also experience performing penetration and vulnerability tests, computer forensics, and social engineering tests. He is currently full-time Professor at Rochester Institute of Technology University. His current research concerns telecommunication security systems and networks, post-quantum computing, cryptography, computer and mobile forensics, blockchain, AI, machine learning, Big Data and Analytics, Internet of Things (IoT). He is also a member of DSOA-Dubai Innovation Advisory Board and DTEC accelerator as a mentor. From 2010 to 2020, Ioannis was a Regional Digital Transformation Technologist- Practice Manager at Orange Business Services in Dubai.
As an avid learner, he also possesses executive certificates from Oxford Said Business School (Blockchain Strategy), MIT (Tackling the challenge of Big Data) and from Columbia Business School (Driving Strategic Impact Program). Moreover, he is the author of a plethora of journal papers and book chapters; a member of IEEE since 1997, ISACA and he is serving as a reviewer in several engineering journals, and conferences. He also holds numerous industry certifications including the EC-Council CEHv9, CBH, ISO27002, CISCO/CCNA Data Center, PRINCE2, COBIT 5.0, IBM Certified Infrastructure Cloud Solution and IBM Cloud Computing Architecture, ITIL, TOGAF 9, and Scrum Master.
Ioannis holds a PhD in Computer Science from University of Sunderland, UK, a master’s degree in Telematics Management from University of Danube Krems, Austria, and bachelor’s degree (Laurea) in Electronic Engineering from University of Rome "La Sapienza", Italy.

Jason Scott has over 20 years of Information Technology and Information Security experience and is currently the Executive Director for the US Army AR Cyber Brigade where he is responsible for overseeing all facets of training, readiness, oversight, and operations of over 1100 Cyber professionals charged with defending Department of Defense networks. His recent work experience outside the US Army includes Cybersecurity Consultant with Capgemini USA and Red-team Lead, Chevron, Inc. He holds a Master's in Business Administration from Southern New Hampshire University, a B.S from Louisiana Tech University, and two master’s certificates in cybersecurity from Norwich University. His certifications include Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), and Certified Data Privacy Solutions Engineer (CDPSE).

Jeremy has been working within the field of Cybersecurity for the last 15 years. He is currently employed by the Defense Logistics Agency as an Information System Security Manager. In this role, he oversees the implementation of information system security and privacy controls, and performs risk assessments based on the NIST Risk Management Framework.
Jeremy obtained a BS in Business Administration, Management Information Systems, from Shippensburg University of Pennsylvania. He holds a number of industry certifications, including: CISSP, CCSP, GWAPT, GCWN, CEH, Security+, Linux+, Project+, and CDPSE.

Jesus M Diaz Moreno is a Cyber Security Expert with more than 10 years in the field of IT and Cyber Security in Spanish MOD and NATO, and 27 years of experience in Communication and Information Systems (CIS) in the Spanish MOD. He has been, as well, CIS instructor in Spanish MOD.
Wide experience in design, development and establishment of cyber security in classified and unclassified networks. He has extensive experience in conducting vulnerability assessments, audit and analysis to ensure the highest level of security of the networks.
Excellent level of experience in working with network and system administrators to achieve the highest standards of cyber security.
He has cooperated with the Spanish University Camilo Jose Cela in the CIS security area for the “IS Technologies Master” program.

Dr. Kamran Morovati is a cybersecurity researcher and a security architect. His research interest includes DLP techniques, Automated Malware Analysis, and Applications of ML/AI in Security Orchestration and Automation.

Security Evangelist, with broad commercial experience in IT. I believe that the best way to avoid vulnerabilities is to prevent them.
Has successful experience in building security strategies and processes for development teams, embedding security into the development lifecycle on all stages.
Speaker at various international conferences, organizer of IT conferences in Ukraine, lecturer of the course on Software Testing at National Aviation University in Ukraine.

With 17 years of experience in on-premise infrastructures and 11 years in cybersecurity and Cloud environments, managing numerous critical projects in multi-national companies on various sector such as banking, insurance, and international organizations. I have extensive knowledge in networks, operating systems, security applications, cybersecurity and monitoring systems that enhance detection and recovery capabilities. My main tasks are the design, construction and implementation of secure architectures.
I have certifications such as MCSA and MCSE in Cloud Platform and Infrastructure, Architecting Microsoft Azure Solutions, Project Management and C|EH Certified Ethical Hacker, in addition to extensive knowledge in Cloud (AWS and Azure), SIEM such as Splunk and Sentinel, EDR, Firewalls, Office365, among others.

Shaun is a business technologist who’s spent much of his career in defence, intelligence & telecommunications where he has experience in Cyber Security, resilience, IT, data and product development roles, from day-to-day practitioner and specialist up to CTO level.
Shaun’s role as Strategic Advisor for Technology & Innovation at Splunk sees him supporting organisations through their transformations and large change programmes, helping them to think more strategically or differently about their use of data and technology to improve the organisation’s security posture and validate and implement their business strategies. Security is now at the heart of almost all successful organisations so Shaun spends his time ensuring that conversations and leadership occur at all levels.