• Responsible for securing AWS, Azure and GCP• Review 3rd party vendor security• Leading application security and DevSecOps

• Implemented CIS Benchmarks on Google Cloud (GCP) to support an increased regulatory environment by leveraging both preventive and detective controls• Deployed Wiz.io Cloud Security Posture Management (CSPM) to detect and remediate security misconfigurations and risks within Amazon Web Services (AWS)• Improved transparency for development teams to convey their application security risks• Designed security requests portal and workflow, including firewall and web access requests to streamline exception process• Hardened Cloudflare WAF configurations & migrated Cloudflare management to Terraform to support distributed management• Leveraged Terraform to deploy AWS Lambda functions, SNS topics, SQS queues, S3 buckets and CloudWatch Logs to export log data from security tooling, enable alerting for security detections and automate security incident case management• Rewrote Docker images to support Static Application Security Testing (SAST) and Infrastructure-as-Code (IaC) scanning as part of DevOps pipelines, simplifying the feedback loop for developers

• Led cloud security strategy and partnered with engineering and application teams to review architecture and configurations• Secured AWS using native services such as GuardDuty and Security Hub, in addition to, third-party CSPM tooling including Palo Alto Prisma Cloud.• Managed team of nine who interfaced directly with internal clients and external partners to design and validate security controls, including preventative and reactive controls and monitoring• Architected a container security program including build and repository vulnerability management to identify and reduce risk

• Designed hybrid DNS in AWS using Route 53 and Route 53 Resolver and creating Inbound and Outbound endpoints and rules• Authored Infrastructure as Code templates, including CloudFormation, to deploy highly available and fault tolerant applications• Assisted application teams in designing, building and implementing various vendor products, including managing AWS cross account access, S3 bucket policies and KMS encryption

• Interacted with industry research analysts to understand best practices and tooling to assist with control validations• Coordinated with Information Security peers to gather details on new project controls, understand and spot potential validation opportunities and identify gaps

• Orchestrated JIRA for improved project management and management visibility • Managed team of four to maintain and develop Splunk dashboards for various use cases, including compliance and security, and deployment of Securonix User Behavioral Analytics (UBA)• Earned jThx Award 3 times. Nominated by peers for extraordinary contributions and approved by CIO

• Interfaced directly with application teams to implement security solutions including access and identity management, single-sign on, and break glass• Assisted Market Data in Bloomberg FTP to SFTP conversion and Bloomberg Data License upgrade by leveraging Splunk to identify hosts which were connecting to each service• Deployed and maintained CylancePROTECT across 9,000 devices to provide next generation malware detection capabilities

• Managed network security alerts using FireEye and Bluecoat Security Analytics (formerly, Solera Deepsee)• Utilized Splunk for long term investigation and reporting• Developed an Information Technology website which aided in reduction of calls to the Helpdesk and provided IT information firm-wide

• Configured Qualys to scan for operating system vulnerabilities• Partnered with development teams to mitigate and remediate vulnerabilities• Analyzed and compared Computer-based Training services