Griffin Payne Email & Phone Number

Denver, Co, Us

San Jose, Ca, Us

Design and implement custom hardened containers for FedRAMP and commercial environments, integrating container security scanning, validation, and signing in CI pipelines in AWS. Developed automated container hardening and package management using Python scripts embedded in GitHub Actions. Architected and deployed HashiCorp Vault modules to streamline customer onboarding and centralize secrets management. Developed and tailored runtime security solutions, including Falco, Falco Sidekick, and OSQuery, to enhance container and host-level logging.

Lead cyber security advisor with Damascus, focusing on our clients online presence and home device security. I perform wireless penetration testing, device configuration review, and recommendations to secure your home and family from online threats. I also support our physical security services performing assessments against the exterior and interior of the home, and recommending ways to strengthen your homes security posture.

Herzliya, Israel , Il

Led pre-sales demonstrations of the Upstream Platform, tailoring presentations to prospect needs and capturing client requirements for smooth engineering handoffs. Conducted training workshops for automotive clients on current cybersecurity threats and defensive strategies. Deployed the Upstream Platform in Azure and AWS environments with Terraform, using DataDog for health monitoring, and collaborated closely with client engineering teams to expedite deployments and integrate data seamlessly.

Menlo Park, California, Us

Directed cross-functional teams in client and internal projects, mentoring junior testers in attack surface analysis and findings validation. Led major initiatives as interim head of Vulnerability Management, driving key client projects, and fostering strategic partnerships with Tenable and Qualys to enhance vulnerability identification capabilities and secure client discounts.

Armonk, New York, Ny, Us

Conducted in-depth penetration tests on cloud platforms, hardware, and IoT systems, applying advanced testing techniques across AWS, GCP, and Azure environments, as well as container technologies. Developed and implemented custom Python tooling to streamline penetration testing processes, automate reconnaissance, and enhance testing depth. Led research initiatives to create evasion tactics for EDR systems and contributed to threat modeling and attack scenario development for high-impact environments. Customized vulnerability management programs, enhancing team productivity and improving client outcomes through tailored testing strategies and technical consultations.

Armonk, New York, Ny, Us

Hartford, Connecticut, Us

Led a comprehensive security overhaul across Aetna’s affiliate companies, deploying advanced EDR systems to enhance threat detection and response. Directed initiatives to optimize vulnerability management practices, achieving faster threat identification and mitigation across subsidiaries. Oversaw Splunk operations for Aetna’s largest affiliate, creating customized dashboards for cross-functional teams and implementing proactive monitoring strategies.

Minneapolis, Mn, Us

Directed risk and compliance assessments for network and application security upgrades, focusing on firewall rules and logging protocol changes. Integrated security protocols into the agile development lifecycle, fostering cross-departmental collaboration from project inception to deployment, resulting in enhanced product security. Led the enterprise-wide deployment and optimization of Tanium agents, reinforcing global cybersecurity infrastructure through strategic testing and rollout.

Executed in-depth security assessments across wireless, external, and physical domains, employing advanced social engineering techniques such as phishing and vishing. Analyzed security breaches using native OS tools and FTK for forensic investigations. As a certified PCI-QSA, led PCI compliance assessments for retail clients, ensuring technical accuracy and rigorous evidence evaluation during on-site audits.

Westlake, Ohio, Us

Managed the implementation of network components, access control, and firewall and IDS/IPS configurations, overseeing log monitoring, alert response, and incident investigation. Supported the help desk by designing client security awareness initiatives, creating baseline images, hardening systems, and leading patch management programs. Monitored vulnerabilities continuously, deploying patches and remediating risks as needed to maintain secure systems.