I am a Senior Security Engineer specializing in DevOps with extensive experience in automation, vulnerability management, application security, cloud security, container security, and incident response Proficient in both Azure and AWS environments, I excel in developing policies, processes, procedures, tools, and automation with minimal supervision. My preferred programming languages include Python, Bash, and PowerShell
Experience
Delivering scalable security engineering solutions to support the company’s mission, with a focus on cloud security, automation, and real-time threat detection
- Implementing cloud security Guardrails in AWS and Azure
- Spearheading Automation of cloud security auditing
- Developing and implementing a comprehensive JSON-structured inventory of cloud security alerts and conducted purple team exercises to validate alert efficacy by simulating attacks and verifying detection accuracy
- Designing and developing cloud security alerting mechanisms and interactive dashboards in Splunk to enhance real-time monitoring and threat detection
- Collaborating with Development, DevOps, and System Administrators
- Managing Wazuh for file integrity monitoring, transitioning from manual to automated installations using Ansible with GitLab-stored templates, and successfully migrated Wazuh servers and thousands of hosts to a new, supported operating system
- Performing Security Assessments of Cloud Based Applications (Fargate, Lambda, API Gateway, KMS)
Founding the new cyber threat intelligence program while providing scalable solutions, emphasizing automation and cross-team collaboration to enhance overall security posture
- Automating tasks and procedures for various teams
- Architecting serverless solutions for security automation
- Developing security infrastructure as code (Terraform/Chef)
- Leading the email security engineering initiative
- Preparing analysis and reports for leadership
- Collaborating with various teams for incident response
- Implementing security policies across various teams
- Performing open source intelligence gathering
- Identifying, analyzing, and mitigating threats
Implementing scalable security engineering solutions, driving automation, and integrating container security into CI/CD pipelines to support the company’s mission
- Coordinating Vulnerability Management
- Spearheading Automation of Security Tasks
- Pioneering Shift Left Movement at GreenSky
- Implementing Container Security into our CI/CD Pipeline
- Collaborating with Development, DevOps, and System Administrators
- Performing Security Assessments of Cloud Based Applications (Fargate, Lambda, API Gateway, KMS)
Leading DevOps initiatives to provide scalable solutions, managing projects, and establishing Infrastructure as Code to enhance operational efficiency
- Managing projects and assigned tasks in Jira
- Configuring jobs and pipelines using Jenkins
- Coaching and training other team members
- Performing production deployments and troubleshooting
- Establishing Infrastructure as Code at GreenSky, putting our entire application stack into Chef
- Moving KeyCloak from standalone to high availability using Chef Cookbooks