Cyber Security Engineer
CurrentResponsible for identifying and managing system vulnerabilities and cyber threats to the business.Architected a Tenable deployment to identify and track vulnerabilities across nearly 2000 systems.Worked with multiple teams, from developers, to system administrators and architects to diagnose and plan remediation strategies based on security findings.Lead hardening of HAProxy load balancer and Apache configurations to minimise attack vectors.Auditing and tightening rules on Cisco ASA firewalls.Improving security within Active Directory infrastructure by implementing automated monitoring and management of machine and user accounts and developing more controlled Group Policies,Identified weaknesses in processes and designed solutions to mitigate and eliminate them.Implementing secure-by-design principles based around Security Advisor as part of expansion to Azure cloud.Other main tools used include nmap & wireshark for network forensics and PowerShell & bash scripting for network information gathering and mass staged deployment of fixes and improvements.