Chad Magee Email & Phone Number

Denver, Colorado, Us

As a Senior Cloud Security Engineer at Ibotta, I have effectively contributed to the improvement of our cloud security infrastructure and corporate training in the following ways:Firewalls: Deployed and configured WAFs, safeguarding critical web applications. Working currently on the potential to deploy Network Firewalls using AWS Firewall Manager to protect resources living within our VPCs. Identity Center and ABAC: Assisted in the rollout AWS Identity Center as well as ABAC (Attribute Based Access Control) for IAM. Privacy Engineering Task Force: I was added to a Task Force as the security SME. I assisted in architecture reviews, setting up the AWS infrastructure, conducted security audits, and remediated any security gaps in the final Privacy Enablement Pipeline service. Which was used to automate Data Subject Deletion and Access requests required by multiple privacy laws. Services used: Rest API Gateways, Lambda functions, S3 Buckets, SNS and SQS. Vulnerability and Audit Process: Created a new audit process for a specific vulnerability, secret leakage, and IAM User key rotations.Incident Response Runbooks: Authored runbooks for the following compromised AWS services: EC2, IAM, and S3 Buckets. Purple Team: Building out Ibottas first ever purple team focused on common attacks against AWS cloud infrastructure. Attack Simulation Workshop: Led a workshop training infrastructure specialists on handling SSRF vulnerability attacks where over 75 software engineers were in attendance. Deception Engineering: Led a project to create and deploy strategically Canary Tokens across Ibotta's AWS accounts. GCP Auditing: Conducted audits on GCP projects, implemented GCP security recommendations, and cleaned up inactive projects.

Moline, Il, Us

At John Deere, I took on the additional responsibility of developing and maturing our Purple Team:Team Building: Assisted in the formation and maturation of John Deere's Purple Team, contributing to its successful establishment.Service Implementation: Advocated for the evolution of the team into a full-service offering provided by the Threat Hunting sector of the Cyber Security Defense Center, which was ultimately realized.Balanced Commitment: Undertook this project alongside my full-time duties as a Cloud Engineer, demonstrating effective time management and commitment to broader organizational security goals.

Moline, Il, Us

In my role as a Cloud Engineer with a focus on DevSecOps at John Deere Financial (JDF), I've been instrumental in easing the transition of our engineering team into cloud-based operations:Team Participation: Active contributor to the JDF DevSecOps Team, utilizing tools such as AWS, Terraform, Jenkins, and Docker to optimize workflows.Security Evangelism: Advocated for enhanced security measures, acting as a security evangelist for my team and the wider JDF/Deere community.Cloud Transition: Assisted with onboarding teams to the AWS cloud platform, playing a crucial role in JDF's cloud adoption strategy.Architecture Design & Reviews: Contributed to architecture reviews and design, utilizing AWS, Terraform, and Jenkins to create and manage builds.Knowledge Documentation Creation: Authored detailed knowledge documents on AWS, Software Engineering, Security, and Jenkins, providing valuable resources for engineers.Security Presentation: Delivered a security-focused talk to an internal DevOps group of over 75 Deere engineers, fostering a culture of security consciousness.Cost Hackathon 2020: Identified unused resources during the Cost Hackathon 2020, contributing to annual company savings of $900.Interim Scrum Master: Utilized my prior experience from the Global Cloud Security role to serve as the Interim Scrum Master for my team from November 2020 to January 2021.

Moline, Il, Us

In my role as a Cloud Security Engineer at John Deere, I took on additional responsibilities to implement Scrum methodologies within our team:Tool Expansion: Worked on the expansion of open source and paid tools to automate the security of John Deere’s AWS environment.Code Reviews: Regularly conducted thorough code reviews to ensure the quality and security of our software.AWS Security Evaluations: Conducted security evaluations of AWS services for our development teams.Security Roles: Participated in both defensive and offensive security work to ensure the robustness of our security measures.Scrum Master Initiatives: As a Technical Scrum Master, I implemented several strategic initiatives, including: - Encouraging pair programming and mobbing on complex stories to boost team collaboration and cross-training on AWS and Azure. - Implementing a team kanban board to enhance work tracking. - Restructuring our stand-up meetings to prioritize user stories and separate non-story related discussions. - Participating in projects and facilitating mobbing sessions, leveraging my technical skills. - Managing all team meetings and defining their structure, including daily stand-up, sprint review, retro, sprint planning, and Agile Talks. - Developing a methodology using Flowdock to keep user stories updated, providing details about the most recent work, next steps, code changes, and other useful information. This approach has minimized constraints and improved story completion.

Moline, Il, Us

As a Cyber Security Analyst at John Deere, I held key roles in vulnerability management, penetration testing, and security training:Vulnerability Management: Specialized in vulnerability management and research on the network and infrastructure team, implementing comprehensive strategies to identify and mitigate security risks.Penetration Testing: Participated in penetration testing of targeted assets, helping to uncover potential vulnerabilities and improve security measures.Purple Team Engagement: Contributed to John Deere's inaugural Purple Team engagement, working collaboratively to strengthen security defenses.Security Training: Actively participated in Security by Design, contributing to the OWASP training program for software developers and creating additional training materials focusing on vulnerability management.Metrics Development: Developed crucial metrics for the Vulnerability Management (VM) team and the board of directors, providing valuable insights for decision-making and strategic planning.

San Francisco, Ca, Us

Des Moines, Ia, Us

Vulnerability Management: Managed vulnerabilities and carried out operational maintenance tasks, enhancing system security and efficiency.Offensive Security Training: Developed 'Offensive Security Happy Hours' on Fridays as an innovative approach to continuous learning, fostering team skill development.

Ames, Iowa, Us

As part of my role at Ames Laboratory, I carried out several key tasks and projects, enhancing the organization's IT infrastructure and security:Resource Configuration and Security: Installed and configured computer resources using automation and group policy, including the implementation of security controls like Avecto's Defendpoint for managing elevated privileges and Duo Security for two-factor authentication (2FA) and secure single sign-on.Cyber Security Audits: Conducted cyber security audits on employee machines, ensuring compliance with established security protocols.Security Best Practices: Collaborated with the Cyber Security/Infrastructure team to implement industry best practices, enhancing our organization's overall security posture.Vulnerability Management: Managed problem systems found through vulnerability scans using Tenable Security Center, mitigating potential threats promptly.Project 1 - Account Migration: Worked with the Infrastructure team to automate the migration of local user accounts to domain accounts for all scientists at Ames Lab. Ensured secure data transfer and automated file transfers within the bash program, and assisted with the documentation of this project.Project 2 - Data Wiping: Undertook a project to securely remove and wipe data from hard drives, further fortifying information security.WannaCry Outbreak Prevention: On my last working day, I successfully prevented a potential WannaCry outbreak, demonstrating proactive threat detection and response.

Des Moines, Iowa, Us

During my internship at Principal Financial, I was involved in several key projects, training programs, and job shadows:Projects:Fulfillment System Web Application: Worked on a new underwriting application replacing a 20-year-old system.Employer Web Project: Contributed to a separate project utilizing ReactJs.Code Jam and UX Design Jam: Participated in team-based initiatives during Principal Financial's Code Jam and UX Design Jam.Training Programs:Completed various courses on Agile 101, Analyzing Security Risks, IT Unit Testing and QA Automation, and Java Developer Guide to Input Validation and SQL injection.Job Shadows:Information Security - Pen Testing: Gained insights into exploiting applications for penetration testing.Secure Software: Learned techniques for securing and defending applications.UX/UI Team: Observed and learned from the User Experience/User Interface team, deepening my understanding of the role of design in application development.

Ames, Iowa, Us

During my time at Iowa State University, I performed a variety of tasks that enriched the overall IT experience for students, faculty, and staff:IT Support: Offered comprehensive IT support, including account management, network troubleshooting, and operating system assistance.Software Installation: Installed and managed ITS-supported software, ensuring necessary tools were accessible to university members.Net-Id Services: Managed Net-Id services, such as registration and email, providing a seamless digital experience for users.Phishing Attack Mitigation: Acted proactively to mitigate phishing attacks by promptly unblocking compromised accounts.Security Breach Liaison: Coordinated with the IT Security team regarding security breach incidents, reinforcing communication between IT departments.Administrative Access: Granted necessary administrative rights to users, allowing for the required software access as per their roles and responsibilities.

Ames, Iowa, Us

At the Iowa Crop Improvement Association, I took on several critical tasks and projects, leveraging my skills in application development and project management:Application Development: Assisted a Senior Systems Analyst with various projects, utilizing Visual Studio, XAML, and C# for front-end application development.Project Management: Acted as Project Manager for all new UI screen developments. Responsibilities included gathering user requirements, designing wireframe prototypes, and gaining stakeholder approval prior to development.User Requirements Collection: Conducted meetings with users to gather requirements for UI screen development.Prototype Design and Approval: Designed wireframe prototypes based on user requirements and organized meetings for approval, ensuring prototypes met user expectations before proceeding with development.UI Screen Development: Post approval of prototypes, spearheaded the development of UI screens, facilitating an enhanced user interface for the organization.Team Collaboration: Actively collaborated with team members and stakeholders, striking a balance between technical development skills and project management in a dynamic non-profit environment.

Clear Lake, Ia, Us

In my role, I executed a variety of functions that contributed to enhancing data quality and providing reliable data for our globally accessed solutions:Corporate and Securities Research: Conducted comprehensive research on corporations and securities using defined methodologies, identifying key relationships and ensuring credible data output.Market Monitoring: Kept a close eye on various market segments through external research and the use of proprietary software, identifying indicators suggesting updates to tracked securities, entities, and corporations.Data Cleansing: Worked tirelessly to enhance data quality over time on both new and existing data through continual cleansing efforts, aligning with our organization's commitment to accurate and reliable data.Quality and Production Standards: Ensured that all work adhered to the data quality and production standards as outlined in our policies and procedures, reinforcing our commitment to operational excellence.Project Participation: Actively participated in assigned projects, supporting the management team in improving automation, efficiency, and effectiveness of our solutions.

Bachelor Of Science (Bs), Management Information Systems

Associate Of Arts (Aa), Criminology

Studied Pre-Engineering, Engineering And Mathmatics