John Z Black
Bar Harbor, ME • (207) 245-1010 • contact@johnzblack.com
With over 25 years of experience in secure software development, systems administration, and architecture, I bring leadership and a depth of knowledge in crafting and refining security strategies that not only mitigate risks but also foster a culture of security awareness across an organization.
Whether you're seeking a long-term, full-time partnership or need short-term guidance to assess and improve your current security framework, I'm ready to help secure your assets, software, data, and most importantly, protect your employees and customers from ever-evolving cyber threats.
Experience
Screencastify
Director of Cyber Security
Nov. 2020 – June. 2023 · 2 yrs 8 mos
- Spearheaded the creation and implementation of a comprehensive security practice at Screencastify, significantly enhancing the company's security posture through strategic planning, in-depth analysis, and collaboration with stakeholders across the organization.
- Led a wide array of security initiatives, including security awareness training, phishing simulations, ransomware protection, attack surface reduction, and improved identity and access management, directly contributing to the robust defense against evolving cyber threats.
- Managed internal and external penetration testing, vulnerability scans, and the drafting and implementation of information security policies, ensuring compliance with legal standards and safeguarding company and user data against breaches.
- Established a proactive public security presence, handling security communications with the media and responding to information security assessments and audits from various external organizations, fostering transparency and trust with users and external partners.
At Screencastify I spearheaded the creation and implementation of a comprehensive security practice. Beginning with conducting in-depth analyses of our processes and systems, and crafting strategic security plans, I led various initiatives such as security training, phishing defenses, ransomware protection, and improved access controls. Additionally, I managed penetration tests, vulnerability scans, and policy drafting for legal and compliance, while also handling security communications with the media and responding to infosec assessments at various levels.
My mandate at Screencastify was to design and build a comprehensive security practice. After explosive pandemic related growth in the company and user base, there was an urgent need to ensure that security became a top priority.
I began by collaborating with stakeholders across the organization from executives and legal to individual employees, gaining a deep understanding of our existing toolsets and methodologies. I took the same approach with our engineers and devops to be able to accurately assess the state of our servers and proprietary code.
With my analysis of the threat landscape, I crafted a risk assessment and a strategic plan to protect our organization, workforce, and end-user data.
I led numerous ongoing security initiatives including
- security awareness training
- phishing simulations
- ransomware protection
- attack surface reduction
- improved identity and access management
- security code reviews
- ran internal penetration testing and vulnerability scans
- managed external third-party pen tests
- drafting and implementing information security policies
- implement and manage mobile device management tools
- prepared and managed responses to various infosec assessments and audits required by external partners
- established a public presence to address security concerns from media and independent researchers, championing transparency and proactive communication.
Praxent
Senior Software Engineer & Architect
Dec. 2014 – Nov. 2020 · 6 yrs
- Diversified technical expertise, mastering a wide range of technologies including Node, Python, React, and cloud architecture, which positioned me as a key contributor to high-profile and innovative projects.
- Played a crucial role in enhancing the cybersecurity posture of the company and its clients, leveraging my deep interest and expertise in cybersecurity to implement robust security measures and protect digital assets.
- Evolved from a backend development specialist to a leader and mentor, guiding development teams through complex projects with a focus on continuous learning, innovation, and adherence to tight deadlines.
- Demonstrated exceptional adaptability and leadership, significantly contributing to Praxent's reputation as an innovator by successfully merging technical acumen with strong leadership to deliver outstanding results.
During my tenure at Praxent in Austin, Texas, I enjoyed a transformative journey in the realm of technology and software development. Initially joining the team for my expertise in PHP and backend development, my role quickly evolved to encompass a diverse array of cutting-edge technologies and challenging projects.
Over the years at Praxent, I delved deeply into Node, Python, and new DB technologies. Electron, React, Symphony and other frameworks became a larger part of my skillset, enhancing my technical versatility. My proficiency in cloud architecture and advanced DevOps practices grew exponentially, as did my skills in general server management. This broadened technical repertoire enabled me to become a pivotal figure in the company, often entrusted with unique and special projects that required innovative solutions.
My role extended beyond mere development; I was instrumental in advancing the cybersecurity posture of Praxent. My keen interest in cybersecurity allowed me to not only fortify our internal security mechanisms but also to significantly contribute to safeguarding the digital assets of our diverse clientele.
A significant aspect of my growth at Praxent was the evolution of my leadership skills. I transitioned from a purely technical role to leading and mentoring development teams. My approach to leadership was centered around fostering a culture of continuous learning and innovation, encouraging team members to explore new technologies and approaches. This not only enhanced team cohesion but also led to the successful execution of complex projects under tight deadlines.
In summary, my period at Praxent was not only a testament to my adaptability and technical prowess but also a reflection of my growth as a leader in software development. I successfully combined technical acumen with strong leadership, consistently delivering results that surpassed expectations and contributed to the company's reputation as an innovator in the tech industry.
Brown and Miller Direct
Sr. Web Developer
Jun. 2006 – Feb. 2010 · 3 yrs 9 mos
- I served as lead developer for a wide array of web projects at the agency, including in-house and client projects.
- Played a pivotal role in creating innovative online platforms, such as survey sites for car dealerships, social networks, and dating sites, showcasing a capacity for creative and technical problem-solving.
- Lead developer of FarmersOnly.com, one of the agency's largest projects, contributing significantly to its growth and success by optimizing user experience and membership features.
- Transitioned to a contractor role upon relocating, maintaining a key position in further developing and optimizing FarmersOnly.com.
Lead developer for most web projects at the agency. This included in-house ventures as well as client sites. We created survey sites and programs for car dealerships and other brick & mortar businesses, Created new social networks and dating sites, even the occasional new invention or product needed a site as it came to market. Largest site was FarmersOnly.com which was founded by one of the partners at the agency.
I left the agency when I moved out of state. I became a contractor for them as they were unable to fill my position at that time. Most aspects of the site were again rewritten or re-optimized between myself and some new team members to further improve user experience and membership. At some point I decided I had been working on FarmersOnly.com long enough and moved on to new projects.
Cleveland Free Times
Webmaster/developer & Print Production Designer
Apr 2003 – Dec 2005 · 2 yrs 9 mos
Ernst & Young (Intellinex)
Flash Designer / Actionscript Developer (contract via The Creative Group)
Jan 2000 – Oct 2001 · 1 yr 10 mos
OntimeTraining.com
Flash Designer/Developer
1999 – 2000 · 1 yr
Qual.net
Network Operations Technician
1998 – 1999 · 1 yr
General Electric
IMC Help Desk Analyst and Network Support Technician (contract via DeVore Technologies)
1997 - 1998 · 1 yr
SeaWorld - Anheuser Busch Entertainment
Wireless Technician / Electronic Services Technician
1995 - 1997 · 2 yrs
Working with John, rather -- watching John do his work, continues to be a real joy. John is a self-starter, often managing up to a dozen simultaneous initiatives across multiple disciplines. John contributes at least to info-sec, application security, architecture, infrastructure, risk assessments, RFP's, compliance and IT.
Milo Todorovich — VP of Engineering — Screencastify
You're probably one of if not THE most helpful people in the company. I feel like I work with you a lot on the various customer facing security items and trying to build up our program, etc. But it also seems like you work with EVERYONE a lot, so keep being helpful and a great partner all across the business.
David Pruitt — General Counsel — Screencastify
John's security capabilities across many different facets of our technology stack are amazing. His security understanding runs broad and deep. In trying to decide on our DNS infrastructure approach, John pointed out the security hole with our current [ ... ] Based on John's recommendation, we decided on a DNS approach that greatly improves our security posture and simplifies our infrastructure deployments.
Anson Kee — Senior DevOps Engineer — Screencastify
One thing that always stands out to me about John is how steady and consistent he is. I know that he is often being pulled in a hundred different directions but he is always prompt at answering my questions and supporting everyone else. I know that if I need something from him, it will always be done and done well.
Morgan Jarvis — People & Culture Manager — Screencastify
John has been a big help all summer on internal Praxent tools while pinch hitting across our portfolio by bridging emerging technical gaps between clients. Without his expert creativity and quick work, we could have dropped the ball on a number of our client accounts. John's very creative and impressive work on Praxent's market research tools blew me and Kevin away and have helped us to acquire and maintain a clearer view of the competitive landscape. Thank you John for all you do to support our clients and teams with your creativity and "yes and" spirit.
Tim Hamilton — Founder and CEO — Praxent
John has done some outstanding work on SCI. He developed a robust backend platform, deployed on AWS with a microservice architecture that leverages serverless technology, and serves React via S3. This solution was built in such a way to scale as needed, reducing overall cost. In addition, John was able to build the solution in such a way that we could reuse this technology and strategy in future clients as well.
Ryan Ostrom — Director of Engineering — Praxent
I'm extremely grateful to have John guide our cybersecurity efforts. His leadership and counsel have been invaluable and educational.
Chris Walker — Director of Operations — Praxent
He's making the whole organization look really, really good. Second, and more importantly, you should attach probes to John's brain as he works, study his behaviors, and seek to the greatest extent possible to reproduce those behaviors on all of your projects.
Kevin Hurwitz — Managing Partner — Praxent
Independent Work
vCISO / Cybersecurity Specialist
gNerdSec Cybersecurity (gNerd Laboratories LLC) • May 2017 - Present
gNerdSec - Providing fractional cybersecurity services and consulting to small and mid-sized businesses.
Risk analysis and threat assessment, ransomware protection, training, data redundancy, disaster recovery, IAM, vulnerability and penetration testing, MDM, policy creation and more.
Freelance Software Engineer
Self-Employed • Jan. 1998 – Apr. 2015 · 17 yrs 4 mos
- Managed a diverse portfolio of design projects, including 3D animation, video editing, and print and packaging design, demonstrating a wide-ranging creative skill set and attention to detail.
- Led the development of custom e-commerce platforms and social networks, highlighting strong technical capabilities and a knack for pioneering green-field software projects.
- Established a full-service web solution business, delivering comprehensive packages that included hosting, system design, custom development, and modern, responsive front-end designs, showcasing versatility, entrepreneurial spirit, and a client-focused approach.
In 1998, after years of primarily working in networking and systems administration, I made the leap into the world of freelance design and development.
It was an amazing journey, often balancing full-time roles at different companies while feeding my passion for software development and design.
My design projects were quite varied – from the dynamic world of 3D animation and video editing to the intricate details of print, packaging, and designing flyers for exciting events.
On the development side, I had the chance to work on a wide range of projects, from small personal art sites to building custom e-commerce platforms and social networks. I thrived in leading green-field software projects.
In 2010, I decided it was time to shake things up again and returned to being my own boss full time.
Since then, I had the opportunity to work on some fantastic projects. I didn't just build websites; I offered complete packages that covered everything from hosting and system design to custom development and creating responsive, modern front-end designs. Below, I list a few of my favorite projects, showcasing my journey and the full range of services I provided to my clients.
Recent blog posts
Yakamein - Instant Pot recipe
A classic Creole fusion of flavors. Famous in New Orleans for curing hangovers but great for any meal. A unique beef noodle soup unlike any other I've had. As a lover of all things noodle, this was a must-try for me.
Read MoreAdditional Links
Social Links
- Github: https://github.com/badZombi
- LinkedIn: https://www.linkedin.com/in/johnzblack/
- Instagram: https://www.instagram.com/badzombi/