×
Matthew Griffiths

Matthew Griffiths

Security Architect | General Hacker | GWAPT | GSEC


Background


Work Experience

Work Experience

  • Security Architect, Transact Campus Inc

    Apr, 2022 - Jan, 20252 years 8 months

    Staff Security Architect at Transact Campus Inc., spearheading security and compliance initiatives across product development lifecycles. Orchestrate the implementation of security-first methodologies through modern DevSecOps practices.

    • Designed and implemented security automation frameworks that reduced vulnerability remediation time by 80% through secure-by-default architectures

    • Developed custom compliance automation tool integrating Jira and PCI ASV scanning, streamlining compliance workflows and reducing manual quarterly compliance manual work time by 90%

    • Led successful enterprise-wide migration from Trend Micro Deep Security to CrowdStrike Falcon, enhancing endpoint protection capabilities across 3000 endpoints

    • Established integrated security monitoring ecosystem using Rapid7 suite (InsightVM, InsightIDS, InsightCloudSec), improving threat detection time

  • Security Engineer, Transact Campus Inc

    Aug, 2018 - Apr, 20223 years 8 months

    Security Engineer focused on cloud security, compliance, and security automation across AWS and Azure environments. Led implementation of security controls and monitoring solutions while maintaining SOC and PCI compliance requirements.

    • Established comprehensive security monitoring program that achieved 99.9% uptime for security event detection and response across multi-cloud infrastructure

    • Managed end-to-end penetration testing program and vulnerability assessments, delivering actionable remediation plans that improved security posture across product portfolio

    • Implemented automated vulnerability management program that eliminated all critical and high vulnerabilities (from 160 to 0) within 18 months

    • Architected and deployed automated DAST scanning workflow using GitHub Actions, increasing scanning coverage by 200% while reducing manual effort

    • Achieved zero audit findings across SOC 2 and PCI-DSS assessments through proactive control implementation and documentation

  • Director of Support - Cashnet, Blackboard

    Sep, 2015 - Aug, 20182 years 10 months

    Director of Support for Cashnet payment platform, overseeing mission-critical payment processing systems with stringent uptime and reliability requirements. Led technical operations and client support for real-time payment processing infrastructure serving higher education institutions.

    • Orchestrated successful migration of 8+ years of customer data across Salesforce instances while maintaining 100% data integrity

    • Led technical support for large-scale cloud migration projects, transitioning from on-premise to AWS and subsequently to Azure infrastructure

    • Managed successful transition of 300+ clients from single-tenant to multi-tenant database architecture with zero service interruptions

    • Implemented new support processes that increased client satisfaction scores by 40% and reduced average response time by 60%

    • Developed and maintained comprehensive documentation for payment processing systems, ensuring PCI-DSS compliance and operational excellence

  • Senior Client Support Engineer, Higher One

    May, 2012 - Sep, 20153 years 3 months

    Senior Technical Support Engineer specializing in enterprise payment processing systems for major higher education institutions including UCLA, California State University system, and Stanford University.

    • Managed implementation and maintenance of payment processing systems integrated with major ERP platforms including Ellucian Banner, PowerCampus, and PeopleSoft

    • Led technical training programs on PCI-DSS compliance and payment security for support team members, improving team expertise in credit card and ACH processing

    • Maintained 99.9% uptime for critical payment processing systems through proactive monitoring using Nagios and Splunk

    • Developed automated testing frameworks for payment gateway integrations, reducing deployment errors by 75%

    • Implemented enhanced security protocols for POS hardware systems while ensuring PCI-DSS compliance across all installations

  • Panel Manager, Cint AB

    Jun, 2011 - May, 201211 months

    Panel Manager responsible for implementing market research platforms and managing API integrations for client data collection systems.

    • Led technical implementation of API integrations for major market research platforms, reducing client onboarding time by 50%

    • Developed standardized processes for data validation and quality assurance, improving data accuracy by 85%

    • Managed end-to-end client technical onboarding process, including requirements gathering, implementation, and testing

Skills

Skills

  • General

    Azure

    AWS

    Digital Ocean

    PCI-DSS

    SOC2

    NIST

    CVE

    CVSS

    Network Penetration Testing

    Web Penetration Testing

    SAST

    DAST

    IAST

    OAST

    Anti-Malware

    File Integrity Monitoring

    Firewall

    IPS-IDS

    WAF

    RBAC

    REST

    CI/CD

    Docker

    Kubernetes

    Packer

    node-red

    AI

  • Security Tools

    nmap

    Burp Suite

    InsightVM

    Qualys APP Scan

    OWASP ZAP

    SonarCloud

    Metasploit

    Splunk

    ELK Stack

    Azure Defender

    Trend Micro Deep Security

    CrowdStrike

  • Languages

    Bash

    SQL

    Python

    Go

    Javascript

    YAML

    JSON

    Terraform

  • Vulnerability Research

    Intel/Razer - Priviledge Escalation

  • Currently Refreshing/Learning

    AI / Prompt Engineering

    Hardware Hacking

Certificates

Certificates