Devin Strzok Email & Phone Number

Los Angeles, Ca, Us

San Francisco, California, Us

Leading DoorDash's corporate and platform security teams, owning Doordash's identity and corporate security architecture. Focus areas include identity engineering, zero trust implementation, third parties, office networks, endpoints, data security, detection & response tooling, logging

Seattle, Wa, Us

Helped develop a risk management program to identify, track, and action strategic information security risks across AWS and Amazon enterprises

San Francisco, California, Us

- Authored 20+ technical and strategic documents proposing various security initiatives; Co-authored Twitch’s 2024-2025 Security strategy and established Twitch’s first Enterprise Security team- Led a team of 4 security engineers to secure and enable Twitch’s workforce and business operations including employee identity, third party vendors, Software-as-a-Service (SaaS), employee endpoints, and physical networks- Developed a strategy for Twitch’s employee identity systems and led the transition towards phishing resistant authentication: Migrated all applications to Okta Single Sign-On (SSO), eliminated push authentication and one-time-passwords in lieu of hardware second factors and passkeys, and enforced the use of managed devices- Built tooling to detect and inventory Twitch’s 150+ SaaS applications and developed standards and auditing for application ownership and configuration- Developed plans for SaaS configuration and logging fetchers to create custom regression and threat detections- Founder, co-lead, and advisor of Twitch’s Veteran’s Guild employee resource group. Grew membership 600%

San Francisco, California, Us

- Led a team of 8 security engineers responsible for Twitch’s cloud infrastructure security and third party vendor security programs- Partnered with Twitch’s Platform Engineering organization to leverage AWS Organizations to manage 2000+ AWS accounts, including org-wide Infrastructure as Code (IaC) stack set deployments and security controls via Service Control Policy (SCP)- Managed Twitch’s Third Party Review (TPR) process, owning vendor questionnaires and minimum standards to approve procurements, negotiating for vendors to implement required security controls, and outlining an exception process to document gaps in controls and risk acceptance from the application sponsor

San Francisco, California, Us

- Drove engineering maturity across Twitch by developing tooling and best practices for cross-functional work tasking to maximize engineering effectiveness across product work, technical initiatives, and upkeep- Led the launch of three internally-developed security products including requirements and tooling development, deployment to GitHub Enterprise and/or 2000+ AWS accounts, and ongoing process & sustainment: - Detection and remediation of inadvertently public exposed cloud resources and exposed secrets in Twitch source code repositories - Use of AWS’s Systems Manager (SSM) for software inventory and vulnerability management- Launched a company-wide automated dashboarding, ticketing, and paging solution to appropriately assign and escalate identified security issues depending on time and severity- Shift lead for Sev-1 incident response efforts, coordinating reporting to Twitch and Amazon executive staff, security detection and response, and company-wide corrective actions over a two week period

Berkeley, California, Us

• Led cybersecurity strategy & implementation for both enterprise and the production Quantum Cloud Services (QCS) platform. Implemented best practices (Vulnerability Management, Single Sign-On, Multi-Factor Authentication), threat modeling, vendor risk & penetration testing, and government compliance requirements, including: NIST 800-171; DoD Cybersecurity Maturity Model Certification (CMMC); and FEDRAMP.• Leads cross-functional engineering teams to develop & deliver world-leading superconducting quantum computers to academic, commercial & government customers.

Washington, Dc, Us

• Established ground breaking models for successful “hunt forward” operations, maximizing the employment of underutilized DOD threat hunting professionals• Integrated threat hunting operations with intelligence, interagency partners, and offensive capabilities to engage nation state adversaries in support of national security priorities, including Presidential and mid-term elections.• Directed Hunt/Incident Response engagements on foreign government & critical infrastructure networks.

Washington, Dc, Us

Created multiple teams critical to Coast Guard defensive cyberspace operations, including Blue Team & Vulnerability Management programs.• Managed 18 security engineers in conducting product security assessments, penetration tests, and Vulnerability Management across a global enterprise of over 70,000 networked endpoints.• Conducted risk assessments and provided regular briefings, reports, and prioritized recommendations to executive Coast Guard (CIO-level) leadership on significant IT governance and cybersecurity decisions• Developed technology sharing, operations & training relationships with US Cyber Command & NSA.• Established foundational Coast Guard policy on risk-based IT & Cybersecurity management and both defensive and offensive cyber operations.

Washington, D.C., Us

Earned a Masters of Science, Computer Science (emphasis in Cybersecurity).• Focus areas: Java and Python development, computer architectures, encryption systems, and network attack & defense. Gained expertise in policy making, risk & strategy, and information technology management.

Washington, Dc, Us

• Commanded $10M 87-foot military vessel; responsible for 12 crew, and all operations & engineering• Planned & conducted counter-narcotics, fisheries enforcement and search & rescue missions (3-5 days underway at a time) throughout Southeast Texas coastal region.

Washington, Dc, Us

Communications Officer, Assistant Operations Officer• Responsible for the safety, security, and daily operations of 378 foot military vessel with 180 permanent crewmembers• Led communications staff consisting of 6 personnel responsible for the administration and operation of secure communications circuits during deployment throughout the western hemisphere• During ship decommissioning process, developed and executed complex, multi-agency plan to securely remove and destroy classified communications equipment and key management materials

Master’S Degree, Cybersecurity In Computer Science

Bachelor Of Science (Bs), Electrical Engineering