● Cybersecurity · Critical Infrastructure
I lead cybersecurity for the utilities a city depends on — electric, gas, water, wastewater, and fiber.
Knoxville, Tennessee · CISSP
Author, learnsoc2.com & getunpwned.com
I've been at the Knoxville Utilities Board since 2011 — service desk first, then systems administration, then security. Today I lead the cybersecurity team — security administrators, developers, and analysts — for a multi-utility serving more than 475,000 customers across five systems.
The work spans building and defending: architecting the cyber systems the utility runs on, maintaining compliance across every service it delivers, running identity and access management, incident response, and the risk practice — third-party and vendor security reviews, and assessments that hold up in front of leadership. I hold the CISSP, and I came up through the systems side — it still shows. I automate and secure systems big and small, and I write the policy too.
What auditors actually test, and what the red flags look like. I wrote it because it's what I wish I had when I started out in cloud risk management. Twelve sections, free, updated December 2025.
A free, scenario-based guide to data breaches and identity theft. Freeze your credit; skip the monitoring subscriptions. No ads, no affiliates, no tracking — just the actual fix.
Outside the day job I take on a few independent projects a year. The best way to start that conversation is stefan@brundige.co.