• Managed vulnerability management team relationships with 7 Infrastructure and Engineering teams, contributing to a 78% decrease in critical vulnerabilities and a 42% decrease in vulnerabilities out of SLA, even with a 33% increase in assets scanned.• Deployed and operationalized Wiz cloud misconfiguration and vulnerability scanner to organization wide AWS and Azure accounts using Terraform, building a comprehensive inventory of open security issues and cloud resources.• Developed cloud-based automation to extract and transform security findings, linking asset inventories, security scanning tools, and ticketing tools to drive remediation.

• Led infrastructure vulnerability management program for more than 1.5 million network devices, including vulnerability correlation, remediation, and metrics.• Owned internal customer relationships between vulnerability management and 10+ infrastructure teams.• Collaborated with software and systems engineers to build cloud-scale security tooling to support AWS Infrastructure Security.• Built multi-discipline security program at acquired startup, including leading efforts in network segmentation and hardening, Active Directory permissions audits, Internal and 3rd Party application security reviews, and log aggregation and alerting for a SIEM.• Was a designated “Guardian” for application security reviews, ensuring application configuration and documentation met a high standard.

• Drove infosec excellence through project ownership, tool development, business consultation, and developing automation.• Started and owned a 3-tiered Vulnerability Management program from the ground up, including network vulnerability scanning, web application security, and secure code.• Led Server Hygiene project to modernize 2000 servers with a variety of operating systems.• Created cloud-first automation in Python and Powershell to process threat feeds, ingest data, and create metrics.• Provided information security consulting services to projects and business groups.• Built baselines, metrics, and reporting capabilities to support the mission of the information security program.• Prepared and filed PCI documentation for 5 different payment channels.

• Analyzed network and local vulnerabilities to determine risk to business.• Work with business stakeholders to validate results and coordinate remediation efforts.• Analyze remediation actions taken, identify opportunities for improvement and blockers.• Automate security analysis and processes in Python to free up analyst time.• Interface with other CIS organizations such as Governance, Risk and Threat Intelligence to report on program status and coordinate risk tracking.

• Resolve daily security issues and work on various projects.• Performed a information security risk analysis, comprehensive vulnerability scan, and information gathering penetration test for a department.

• Analyzed various types of malware, built scripts to repair file infections.• Spearheaded research on machine and deep learning to categorize malware.• Shortened time required to analyze malware by creating internal analysis tool.

• Addressed ticketed issues from customers over a wide variety of IT topics.• Improved university security by leading internal project to catalog networked printers.• Reduced attack surface with implemented action plan to update, replace, or firewall vulnerable printers.

• Improved network reliability and performance by upgrading and configuring network equipment.• Smoothed transition from locally managed to cloud managed accounts for 1000s of students and staff.• Saved time and money by spearheading centralization of mailing services from multiple disparate systems.

I resolved hardware and software issues on customer computers and sold consumer electronics such as routers and laptops.

I gave weekly tours of the College of Engineering, provided customer service in the Undergraduate Affairs office. promoted the College of Engineering at official events such as career fairs and presentations, and contacted potential students to address concerns or questions.