[ 01. PROFESSIONAL_SUMMARY ]
Cybersecurity professional with a decade of experience bridging the gap between system administration and offensive security. Expert in scaling security operations, having successfully implemented vulnerability management programs for two major organizations and automated 250+ critical infrastructure tasks. Specialized in AWS cloud auditing and deep-dive technical assessments, backed by several industry credentials including CISSP, CCSP, and GXPN.
[ 02. EXPERIENCE_LOG ]
Executing deep-dive security assessments for custom/commercial applications. Engineered organizational Kubernetes security standards and developed mission-critical KPIs to drive the maturation of the application security lifecycle. Lead threat modeling and architecture reviews for complex system integrations.
Architected security controls for 3,000+ multi-cloud resources (AWS, Azure, OCI). Implemented Prowler for automated CIS compliance across 20+ AWS accounts. Developed 25+ IR playbooks and acted as Lead Incident Responder for all cloud-based security events.
Conducted 25+ security assessments and integrated SAST (SonarQube) into CI/CD pipelines for 15+ dev teams. Developed a standardized assessment framework that reduced audit turnaround time by 20%.
Maintained 99.999% availability for core banking systems. Orchestrated the deployment of Rapid7 InsightVM/IDR across 1,500 endpoints. Optimized organizational efficiency by automating 250+ manual processes. Directed disaster recovery (DR) architecture for core financial infrastructure.
Operationalized efficiency by redesigning 50+ manual workflows. Served as technical lead for Symitar core banking support and infrastructure hardware lifecycle projects.
Managed GFI Cloud deployment for 500+ endpoints. Orchestrated enterprise-wide migration of 200+ systems from Windows XP to Windows 7.
[ 03. ACADEMIC_HISTORY ]
[ 04. VULNERABILITY_DISCLOSURES ]
[ 05. SKILLS_MATRIX ]
[ 06. VALIDATED_CREDENTIALS ]
EXTERNAL SECURE RECORDS IDENTIFIED...