.---.
( o o )
| ^ |
| |
\ /
\_/
SIGNAL DETECTED
====================
RICHARD BELISLE
╭─[richard@gh0stsignal] ~
╰─$ whoami
A strategic, technical, hardworking, and multifaceted
information technology and security professional with
~20 years of practical experience.
I find the signal in the noise.
╭─[richard@gh0stsignal] ~
╰─$
/// CURRENT CERTIFICATIONS
CISA
CISM
CISSP
CRISC
CRTO
GCIL
OSCP
/// PROFESSIONAL EXPERIENCE
IT Security Manager
2024 - Present | Metropolitan State University of Denver
Manage a team of information security professionals with focus on ensuring their continued growth and success. Responsible for evaluating, designing, and implementing information security controls with emphasis on people, process, and technology to improve MSU Denver's security posture through efficiency and automation.
System Administrator / Cybersecurity
2023 - 2024 | City of Greeley (Water and Sewer)
Managed Operational Technology (OT) assets including servers, systems, applications, and network devices while developing a best-in-class cybersecurity program for the public water sector. Implemented SIEM, EDR/AV, network visibility tools, hardened Active Directory, and implemented CIS controls to reduce attack paths into OT networks.
IT Risk and Cybersecurity Manager
2022 - 2023 | City of Detroit (DWSD)
Evaluated the control environment against industry best practices and developed a strategic roadmap to prioritize risk reduction efforts. Led initiatives to mature cloud security posture (Oracle), Active Directory hardening, vulnerability management, and implementation of CIS controls and benchmarks.
Manager (Offensive Security and Intelligence)
2020 - 2022 | Henry Ford Health System
Built the foundation for an offensive security program including tactical purple team exercises and threat intelligence capabilities. Collaborated with H-ISAC, Infragard Cyber Health Working Group, and CTI League while supporting blue team incident investigations and enterprise architecture initiatives.
Penetration Tester
2019 - 2020 | Creative Breakthroughs, Inc. (CBI)
Conducted offensive security operations evaluating customers' preventative, detective, and administrative controls through technical testing. Gained practical experience in external/internal penetration tests, adversary emulation, social engineering exercises, and web application security testing with ATT&CK Framework mapping.
Lead Information Security Auditor / Risk Analyst
2018 - 2019 | Henry Ford Health System
Worked with a team to identify and manage enterprise risks through comprehensive assessments and audits. Assisted with process re-engineering, supported enterprise-wide PHI risk assessment and OCR mock audit, and conducted technical risk assessments of key systems.
Senior Information Security Auditor
2017 - 2018 | University of Michigan: Michigan Medicine
Worked in the Corporate Compliance department redeveloping departmental objectives and maturing risk management efforts including third-party risk management implementation. Functioned as HIPAA Security Rule subject-matter-expert and trusted advisor for security and compliance throughout the organization.
Technology Supervisor
2016 - 2017 | Washtenaw Intermediate School District (WISD)
Managed a team of IT professionals responsible for technical services across Washtenaw County schools including fiber infrastructure and network connectivity. Supported process improvements in asset and vulnerability management while working with districts to understand their technological needs.
Senior Information Technology Auditor
2014 - 2016 | University of Michigan
Conducted IT and integrated audits for campus and health system gaining practical experience with HIPAA, PCI, and other regulatory frameworks. Performed risk-based audits covering technologies from firewalls to electronic-health record systems using NIST frameworks with focus on root cause identification.
Lead Network Engineer
2010 - 2014 | Washtenaw Intermediate School District
Progressed from contractor to lead network engineer responsible for routing/switching, Linux/Windows system administration, virtualization, and backups. Implemented centralized logging, enhanced network monitoring, and rearchitected key systems while assisting other districts with IT troubleshooting and security efforts.
/// EDUCATION
Master of Science in Information Assurance
2011 - 2013 | Eastern Michigan University
Master of Science in Technology with high honors
Morrell Boone Scholarship Awardee for Excellence in Technology
Morrell Boone Scholarship Awardee for Excellence in Technology
Bachelor of Arts in Interdisciplinary Studies
2005 - 2007 | Michigan State University
Bachelor of Arts with high honors
Major: Interdisciplinary Studies in Social Science with political science cognate, specialization in human resources
Major: Interdisciplinary Studies in Social Science with political science cognate, specialization in human resources
/// TECHNICAL ERRATA
Core Competencies
- Risk management
- Strategic, tactical, & operational security
- Vulnerability management
- Threat intelligence
- Incident response
- Offensive security
- Network security
- Full security stack experience
Platforms & Cloud
- Linux (RHEL, Ubuntu)
- Windows Server
- macOS
- Oracle Cloud
- AWS
- Azure
- Docker
- VMware
Security Stack
- SIEM (Splunk, Elastic, QRadar)
- EDR/AV Solutions
- Vulnerability Scanners
- Network Monitoring
- Firewalls/IPS
- Email Security
- Digital Forensics
- Malware Analysis Tools
Professional Activities
- ISACA member - Denver Chapter
- InfraGard member - Denver Chapter
- ISSA member - Northern Colorado (Secretary)
- REN-ISAC member
- MS-ISAC member
- Conference volunteer (BSides, Converge)
- ISC2 CISSP exam writer (2018)
Recent Training
- SANS Incident Leader (2025)
- SANS Reverse Malware Analysis (2025)
- Red Team Ops - ZeroPoint Security (2021)
- PWAPT - Web App Pen Testing (2020)
Recent Presentations
- OT Attack Paths - CyberCheyenne (2024)
- AD Security - NoCo ISSA (2025)
/// CONTINUOUS LEARNING PHILOSOPHY AKA WHY I HAVE JOB HOPPED
Strategic Career Progression
Cybersecurity evolves rapidly, and diverse experience across different environments, threat landscapes, and technical stacks makes for a more effective security professional. Each role has provided unique challenges and learning opportunities that have shaped a comprehensive understanding of information security and more importantly, the business.
/// CREATIVE PROJECTS
PwnyExpress File Transfer
Technologies: HTML5, CSS3, JavaScript, Python, AWS S3, AWS EC2, Web Audio API, and some AI assistance.
Retro-cyberpunk themed file upload interface with interactive terminal aesthetics, procedural audio synthesis, and Max Headroom-inspired glitch effects.
SimpleAsHell.com
Technologies: HTML5, CSS3, React, Babel, Tailwind CSS, JavaScript, and a spell of Claude AI.
A Devilishly Easy Risk Assessment Tool
The Spiderweb - The Active Directory Security Scanner - In Development
Technologies: Python.
Yes. This does what your favorite AD tool does. However, there are more robust checks (think HTTP vs HTTPS on ESC8) and more realistic risk ratings to help prioritize what actually matters.
/// MALWARE ANALYSIS REPORTS
🚧 UNDER CONSTRUCTION 🚧
Malware analysis reports coming soon...
Status: Building analysis framework
/// DIGITAL MUSINGS
🚧 UNDER CONSTRUCTION 🚧
Digital musings and thoughts coming soon...
Status: Collecting thoughts