Sr. Security Engineer · Security Engineer (April 2019 – Present) • Ensure security of...

2
www.itavalon.com PROFESSIONAL SUMMARY Experienced Security Engineer with a demonstrated history of working in the computer software and cloud technology services industries. Skilled in Security Engineering, Security Operations, Security Systems Architecture, Incident Response, Web Application Security, Linux Security, and Cloud Security. Currently learning and implementing Container Security. Hunger for learning and thrives on taking up new and uncharted challenges. Strong information security professional with a Master of Science - MS focused in Cybersecurity. TECHNICAL SKILLS AWS, Agile Methodologies, Splunk, SIEM, Java EDUCATION Utah Valley University Master of Science - MS, Cybersecurity 2017 – 2019 Utah Valley University Bachelor of Science (BS), Information Systems/Technology, Networking and Security 2009 - 2013 Brigham Young University Business Management 2007 - 2009 WORK EXPERIENCE Confidential Company June 2015- Present Security Engineer (April 2019 – Present) Ensure security of applications developed using Agile methodology and a worldwide distributed network of Linux-based infrastructure. Designed, architected, and deployed (using Puppet for deployment automation) a global network intrusion detection system (IDS) to replace expiring incumbent solution. Leverage Splunk for log analysis, monitoring, and event management. Work with devops team to develop security standards and procedures for a migration to containerized micro-services. Incident response and management. Administer identity and access management service. Vulnerability analysis, management, and remediation. Worked with a small security and compliance team to complete successful PCI and SOC 2 audits. Senior Security Analyst (April 2018 - April 2019) Acted as solutions architect for security services, including web application firewall (WAF) based on Mod Security and Bot Management, building complex, customized solutions for multiple enterprise customers. Served as a security technical account manager maintaining and tuning security services for many enterprise customers. Responded to and mitigated complex web application attacks on a regular basis through detailed, creative log analysis and signature building. Support Engineer (June 2015 - April 2018) Supported enterprise customers with their application delivery and security needs ensuring industry leading performance and availability for their web applications.

Transcript of Sr. Security Engineer · Security Engineer (April 2019 – Present) • Ensure security of...

Page 1: Sr. Security Engineer · Security Engineer (April 2019 – Present) • Ensure security of applications developed using Agile methodology and a worldwide distributed network of Linux-based

www.itavalon.com

PROFESSIONAL SUMMARY • Experienced Security Engineer with a demonstrated history of working in the computer

software and cloud technology services industries. • Skilled in Security Engineering, Security Operations, Security Systems Architecture,

Incident Response, Web Application Security, Linux Security, and Cloud Security. • Currently learning and implementing Container Security. • Hunger for learning and thrives on taking up new and uncharted challenges. • Strong information security professional with a Master of Science - MS focused in

Cybersecurity.

TECHNICAL SKILLS AWS, Agile Methodologies, Splunk, SIEM, Java

EDUCATION Utah Valley University Master of Science - MS, Cybersecurity 2017 – 2019 Utah Valley University Bachelor of Science (BS), Information Systems/Technology, Networking and Security 2009 - 2013 Brigham Young University Business Management 2007 - 2009

WORK EXPERIENCE

Confidential Company June 2015- Present Security Engineer (April 2019 – Present)

• Ensure security of applications developed using Agile methodology and a worldwide distributed network of Linux-based infrastructure.

• Designed, architected, and deployed (using Puppet for deployment automation) a global network intrusion detection system (IDS) to replace expiring incumbent solution.

• Leverage Splunk for log analysis, monitoring, and event management. • Work with devops team to develop security standards and procedures for a migration to

containerized micro-services. • Incident response and management. • Administer identity and access management service. • Vulnerability analysis, management, and remediation. • Worked with a small security and compliance team to complete successful PCI and SOC 2

audits.

Senior Security Analyst (April 2018 - April 2019) • Acted as solutions architect for security services, including web application firewall (WAF)

based on Mod Security and Bot Management, building complex, customized solutions for multiple enterprise customers.

• Served as a security technical account manager maintaining and tuning security services for many enterprise customers.

• Responded to and mitigated complex web application attacks on a regular basis through detailed, creative log analysis and signature building.

Support Engineer (June 2015 - April 2018) • Supported enterprise customers with their application delivery and security needs ensuring

industry leading performance and availability for their web applications.

Page 2: Sr. Security Engineer · Security Engineer (April 2019 – Present) • Ensure security of applications developed using Agile methodology and a worldwide distributed network of Linux-based

• Created complex custom JSON configurations and Lua scripts to deliver service meeting customers' unique requirements.

• Worked extensively with git to manage deployments for customer code and configurations. • Established processes and best practices for a growing support team.

Amazon Web Services September 2013 to June 2015 Cloud Support Engineer (July 2014 - June 2015)

• Supported thousands of customers including many Fortune 500 companies with their infrastructure solutions in the Amazon Cloud by owning email, chat, and phone cases and working complex technical problems and/or challenges to an ideal solution.

• Participated in testing and feedback for new features and services in AWS. • Supported customers with escalated cases that needed special handling and attention to

detail as an escalations engineer. • Coordinated technical programs with SES, Workmail, and Storage Gateway teams and

managed support aspects of the programs including training, delegation of responsibilities, and customer interaction.

Cloud Support Associate (September 2013 - July 2014)

DigiCert, Inc, Greater Salt Lake City Area | May 2013 - August 2013 Technical Support Engineer

• Supported thousands of customers installing and troubleshooting SSL certificate installations on all devices and platforms.

• Created and updated documentation for installing SSL certificates on new devices and platforms.

• Performed organizational and extended validation of organizations to establish trust and validate eligibility of organizations to receive signed SSL certificates.

Utah Valley University, Greater Salt Lake City Area | October 2011 - May 2013 Area Tech

• Implemented a new scheduling system for Student Health Services including deploying a new database server, configuring the system, and testing.

• Supported hundreds of thousands of dollars in yearly sales by maintaining 99% uptime of university bookstore servers.

• Deployed an IIS application server for Student Health Services to accept patient intake forms and surveys, submit the forms and surveys directly to the patient database, and reduce the data entry workload for office staff.

• Provided technical support for ~200 users for Windows/Mac and networking.

Vivint, Greater Salt Lake City Area | May 2008 - October 2011 Technician Support

• Served as the team network expert while supporting technicians installing IP security cameras.

• Worked on a special project team to create and deploy a technical wiki as a comprehensive support reference and knowledge base for all technical support representatives.