Christopher Stevenson

Information Systems Security Manager | Vulnerability Management | Incident Response | SaaS Security

San Antonio, Texas, United States

About

Information Systems Security Manager with 4+ years of experience across healthcare and higher education, currently supporting SaaS security operations, with a professional background shaped by emergency response and intelligence analysis. Before moving into cybersecurity, I spent 15 years as a paramedic, served in Hurricane Katrina relief operations, and worked as a crime and criminal intelligence analyst. That experience shaped how I operate today: triaging quickly under pressure, communicating clearly in high-stakes environments, and applying structured investigative thinking to cyber threats, incident response, and operational risk. My cybersecurity work spans vulnerability management, incident response, endpoint security, threat analysis, policy development, access control, and security operations in regulated environments. I’ve deployed DLP controls, built endpoint monitoring automation, supported SaaS access security, and helped strengthen security processes across healthcare and private-sector environments. I hold CompTIA Security+, EC-Council CTIA, and an MA in International Relations, which informs how I think about geopolitical risk, threat actors, and the broader context surrounding cyber threats.

Experience

  • LeoTech (Full-time · 1 yr 9 mos)
    • Information Systems Security Manager
      May 2026 - Present · 2 mos

    • Information Technology Security Specialist
      Oct 2024 - May 2026 · 1 yr 8 mos

      ▸ Deployed and configured Teramind insider threat/DLP platform across macOS fleet; authored custom exclusion scripts to resolve application conflicts and maintain business continuity post-rollout. ▸ Developed automated macOS endpoint monitoring script integrating Slack API to deliver real-time alerts on unauthorized software installations, reducing detection lag. ▸ Administer IP whitelisting for SaaS platform access, evaluating and approving requests to reduce attack surface exposure. ▸ Authoring IP whitelisting policy to enforce a /25 subnet maximum on all SaaS access requests, with mandatory 15-day review cycles requiring tightening or removal to continuously minimize attack surface. ▸ Rewrote 10 security policies to strengthen controls, close compliance gaps, and align with current threat landscape and organizational risk tolerance.

  • Enterprise Information Analyst at Dell Medical School at the University of Texas at Austin
    Jan 2024 - Jun 2024 · 6 mos

    ▸ Improved enterprise vulnerability management processes by strengthening scanning, prioritization, and remediation workflows to support more consistent vulnerability identification and response. ▸ Conducted security assessments on 20+ non-standard software deployments, identifying critical vulnerabilities and initiating remediation to strengthen security posture. ▸ Developed and enforced IT security policies in collaboration with cross-functional teams, strengthening governance and supporting regulatory compliance efforts across HIPAA, PCI DSS, and NIST-aligned environments. ▸ Performed OSINT-driven threat intelligence analysis to detect and assess external threats targeting medical school assets an

  • Central Health (Full-time · 4 yrs 6 mos)
    • Security Analyst
      Nov 2021 - Dec 2023 · 2 yrs 2 mos

      Led incident response planning and cross-functional response coordination using Incident Command System (ICS) principles to improve organizational incident readiness and response execution. * Designed and managed quarterly enterprise phishing simulation and security awareness training programs, measuring user susceptibility and delivering targeted remediation education. * Served as an internal cybersecurity advisor to business and technology stakeholders, delivering risk assessments, threat briefings, and security control recommendations. * Authored the organization’s first cybersecurity After-Action Report (AAR), documenting incident findings, lessons learned, and remediation recommendations for executive leadership. * Developed and enforced IT security policies in partnership with cross-functional teams to strengthen governance and regulatory alignment. * Created internal security knowledge base documentation addressing recurring operational issues, reducing support response times.

    • User Field Support Analyst
      Jul 2019 - Nov 2021 · 2 yrs 5 mos

      ▸ Delivered technical support and diagnostics for 2,000+ enterprise users across complex hardware and software environments. ▸ Provided technical expertise across 5 enterprise-wide projects, ensuring on-time and within-budget delivery. ▸ Maintained thorough ticket documentation and clear handoff communication to ensure seamless resolution workflows across a 2,000+ user environment.

  • Crime Analyst at Austin Police Department
    Jul 2018 - Jan 2019 · 7 mos

    Delivered crime analysis and intelligence support for a 200-officer urban district. * Produced intelligence products supporting investigations and targeted operational response. * Used ArcGIS, statistical analysis, and data extraction to identify crime patterns and emerging hotspots.

  • Crime Analyst at Rapid City Police Department
    Sep 2016 - Jul 2018 · 1 yr 11 mos

    Served as sole crime analyst supporting a municipal police department across criminal investigations and intelligence operations. * Produced operational intelligence briefings, trend analysis, and predictive deployment recommendations for command staff. * Conducted criminal intelligence analysis using geospatial and database analysis tools.