Katie Exposito

Experience

• 

  Freddie Mac

  May 2016 - Aug 2016

  Cyber Security Intern

  • Rotated throughout the cyber security departments which included: Security Testing, Incident Response, Application Security Testing, Identity and Access Management, Penetration Testing and Government, Risk, and Compliance• Analyzed e-mails for malicious threats to the internal environment• Assisted with the quarterly compliance scanning• Produced reports and graphs for the quarterly metrics for the Application Security Testing team• Created SharePoint sites for the Security Monitoring and Application Security Testing teams• Updated and revised standard operating procedure documents for the Cyber Security department Show less

• 

  Freddie Mac

  Jan 2017 - Jan 2020

  • Conducted and created monthly phishing simulations• Collaborated with the CISO and VP of information security to create a new process to increase our security posture when it comes to phishing attacks• Worked with KnowBe4 to create trainings for repeat phishing offenders• Created monthly metrics on phishing results to report to the VP of Information Security• Introduced the PhishAlarm button through Proofpoint to the Freddie Mac environment for easier reporting for end users and reduced overhead within the SOC team• Helped with planning our yearly Cyber Security Awareness Fair for the month of October• Planned Cyber Security Awareness Brown Bags for Freddie Mac Employees• Hosted phishing informational tables at Freddie Mac Headquarters to increase awareness about phishing attacks• Conducted weekend scans on our external scanning tool• Remediated vulnerabilities found through our external scanning tool by collaborating with the appropriate owners and stake holders of the application• Generated monthly cyber risk scorecard reports from an external perspective and presented to VP of information security• Produced vulnerability matrixes to determine if Freddie Mac was vulnerable to certain threats reported by the threat intelligence team Show less

  • Cyber Security Professional

    Aug 2018 - Jan 2020

  • Cyber Security Associate

    Jan 2017 - Jul 2018
• 

  Capital One

  Jan 2020 - now

  • Manager, Cyber Human Risk Awareness

    Aug 2023 - now

  • Principal Associate, Cyber Phishing, Education, and Awareness

    Jan 2020 - Aug 2023