Bruce C. Email & Phone Number

Glasgow, Gb

Make the occasional hacking lab for Pwnded Labs.

Scotland, United Kingdom

Working across the Enterprise to ensure the security of all applications. Creating and designing a self service Application Security Service for internally built applications covering SAST, SCA, DAST, IaC, API Security and Containers. Being the technical authority on the Application Security Tools and point of contact for development teams for additional triage.

Product Owner and Service Manager of a self service Application Security Service for the business covering: internal software: SAST, DAST, SCA, and mobile applications. Commercial off the shelf software: binary scanning, malware checking and sandboxing.

Implementing the Security Orchestration Automation and Response solution within the cloud, developing playbooks in an agile approach and administration of system. Providing level 3 support for the application. Liaising with international internal/external stakeholders and product vendor. Developing external product/tool integrations in Python. Providing varying technical demonstrations to potential customers and end users. Help to continuously develop DevSecOps culture in Fujitsu and create team processes for DevSecOps. Creation of Infrastructure as Code (IaC) within CI/CD pipelines within Azure DevOps. Preforming code reviews of IaC, SOAR integrations, automations and playbooks. Responsible SOAR platform hygiene by patching and upgrading of SOAR production instances and development environment/instances. Troubleshooting the wider MSSP environment to identify and resolve issues within the environment and other offered services. Including but not limited to: EWS, AD, DNS, firewalls, networking, etc.

Designing the Security Orchestration Automation and Response (SOAR) solution deployment strategy within the cloud. This includes disaster recovery, backup, enterprise management, application versioning, application configuration, data/process flows and audit trail logging. Onboarding of customers into the environment, and collaboratively designing approaches on how to access remote customer environments/services. Liaising with international internal/external stakeholders and product vendor. Evaluating different product(s) to integrate into the SOAR solution. Provide training of SOAR platform to both end users and platform administrators. Create, review and maintain technical documentation regarding SOAR Platform and wider Managed Security Services Platform (MSSP).

Open source intelligence gathering in relation to cyber threats. Developing and maintaining scripts and automation efficiencies (C#, python). Liaising with international internal and external stakeholders. Project work for implementing and evaluating Security Orchestration Automation and Response platforms.

Architecting, developing and maintaining a bespoke suite of accessible internal applications (C#, VBA and SQL) for both desktop and tablet devices. Liaising with clients to ensure smooth delivery of projects. Live support for business developed applications. Developing colleague’s knowledge of programming techniques to share best practice.

Bachelor Of Engineering (Beng), Beng (Hons) Digital Security, Forensics & Ethical Hacking, First Class Honours

Modules Year 4 (17/18) - passed with honours Honours Research and Project Methods Malware Analysis and Reverse Engineering Cloud Systems.

Hnc, Computing With Technical Support, A

Modules Professionalism and Ethics in Computing Computer System Fundamentals Developing Software (Java) Graded Unit Team Working.