Tunnl

DevSecOps Engineer

2022-Present

Design RBAC/IAM (Policy-as-Code) frameworks for Terraform deployment to aid in policy enforcement on various types of AWS resources teams can provision and use.

Maintain and refine security solutions and threat detection components to improve the organization's security posture.

Create and leverage AWS CloudFormation templates to launch EC2 images with respect to auto-scaling groups for various CI/CD pipelines.

• -Provision and manage AWS EC2s, AWS IAM Users, and Remote Desktop Workstations for new hires.
• -Train new hires in AWS Best Security Practices & Standards and DevOps Principles.
• -Create and manage various AWS IAM Users, Roles, Policies to ensure least principle of least privilege.
• -Build cloud-based networking solutions with an understanding of network topologies and protocols.
• -Lead company-wide presentations on the importance of security best practices.

Cymulate

Cyber-Risk Assessment Specialist

2020-Present

Collaborated with CISOs by providing education around simulating cyber-attacks across vectors including email and web gateway, endpoint security, and lateral movement.

Aligned with multi-B corporations to support their extended security posture management (XSPM) initiatives by continuously challenging, validating, and managing their security risk, end-to-end across the MITRE ATT&CK framework.

Mapped out organizations with mature security stacks and initiate projects surrounding securing cloud migration by utilizing attack surface management, security control validation, and automated red teaming.

Consulted with enterprise security teams on simulating attacks via data exfiltration, immediate threat intelligence, and full-kill chain APT, to assist security augmentation.

Advised teams on automating purple and red teaming by generating penetration scenarios and advanced attack campaigns tailored to their environments and policies.

Operatix

Information Security Business Development Specialist

2019-2020

Accelerated the growth of various client portfolios consisting of 100% software/cloud vendors.

Created various meetings rooted in operationalizing threat intelligence with SOC teams and SOC personnel.

Introduced web application and API shielding to CISOs interested in adopting digital transformation initiatives.

Educated CIOs on how to effectually enforce policy around the storage, processing, access, sharing, and consolidation of personal data.

Administered initiatives set around securing Salesforce Clouds, including but not limited, Sales Cloud, Community Cloud and Service Cloud.

Led conversations with cyber security directors/executives around autonomous cyber security training platforms for enterprises.