David Schuster Email & Phone Number

United States

Roles: Cloud Security Engineer and a Cybersecurity Engineer• Crafted and implemented a Microsoft Azure Cloud architecture, utilizing Azure Subscriptions and Resource Groups to align with business unit structures and ensure streamlined cloud operations.• Produced an Infrastructure as a Service (IaaS) solution to smoothly transition from on-premises to hybrid cloud infrastructure through Azure virtual networks, subnets, virtual gateways, security groups, and private endpoints.• Configured Platform as a Service (PaaS) components to integrate with on-premises directory services, establishing a hybrid cloud solution to support the initial phase of cloud migration.• Integrated security audit logs into a SIEM solution and enhancing threat detection for Indicators of Compromise (IoC) and Indicators of Attack (IoA) using MITRE Techniques and Tactics. • Configured and supported several endpoint security products for Macintosh, Linux and Windows operating systems.

California, United States

Roles: Cybersecurity Project Technical Lead, Cybersecurity Operation Center (SOC) Lead, Cybersecurity Technical Engineer, and Information System Auditor• Developed and maintained a UEBA application for Privileged Activity Monitoring (PAM), covering OS, endpoint, network, application, and database security.• Enhanced custom UEBA alerting and reporting to encompass enrichment data from systems, e.g. change management, asset management, and Human Resource systems. • Partnered with SOC staff using sprint cycles to develop and update Splunk Search Process Language (SPL) code within an Agile System Development Life Cycle (SDLC). • Incorporated the continuous integration/continuous development (CI/CD) process to code, unit test, build, test, and deploy code to the environment. • Configured and supported a Security Operations Center (SOC) using SIEM applications including IBM Q-Radar, HP ArcSight, Splunk Enterprise, and Splunk Enterprise Security (ES). • Created the Managed, Detection & Response (MDR) procedures to include steps for preparation, detection & analysis, containment, eradication & recovery, and post-mortem process. • Lead the Security Operation team in identifying threats, and resolving them by working with business partners and team members.• Audited data center, network infrastructure, operating systems and applications to identify risk to the business and their customers. • Performed threat modeling by identifying security objectives, setting the scope of the assessment, breaking down the system into subsystem and examining the interaction between components which includes identifying trust boundaries, and ingress & egress connections. • Noted gaps in business application using Security by Design principles introduced by the Open Worldwide Application Security Project (OWASP).

United States

• Aided customers in adapting the Building Security in Maturity Model (BSIMM) for planning, implementing and measuring their software security initiatives.• Conducted regular security audits and assessments.• Identified and assessed potential security risks and vulnerabilities.

United States

• Provided endpoint and network security expertise to assist customers. • Performed risk analysis and security risk assessments.• Assisted customers with implementing security products.

United States

• Assisted customers in the auditing their network management system and information security systems.• Provided administrative and end-user training for the various solutions used in the Security Operation Center.

United States

• Design and implemented the nationwide Wide Area Network (WAN). • Deployed the network and security technology solution.• Lead the Security Operation Center (SOC) team.

Bachelor'S Degree, Management Information Systems, General

Certification, Certified As A Information System Auditor (Cisa)

Certification, Certified Information System Security Professional (Cissp)

Certification, Information Systems Security (Infosec) Professional

The National Security Agency (NSA) and the Committee on National Security Systems (CNSS) recognized that I meet the 4011 training.

Certification, Cisco Certified Security Professional (Ccsp)

Certification, Cisco Certified Network Associate (Ccna)

Certification, Certified Check Point Security Engineer

Firewall-1 Version 3.x

Certification, Certified Check Point Security Administrator (Ccsa)

Firewall-1 Version 3.x