John C. Email & Phone Number

Gardena, California, United States

• Led the design and implementation of a zero-trust architecture across a hybrid cloud environment, reducing potential attack surface by 40%.• Conducted penetration testing and vulnerability assessments using tools like Metasploit and Nessus, identifying and mitigating over 150 vulnerabilities.• Spearheaded security incident response activities, leading a team of 6 engineers to successfully neutralize 8 critical security incidents.• Managed endpoint protection for over 2,000 devices and implemented advanced threat protection using EDR solutions.• Developed and maintained security policies and procedures in accordance with ISO 27001 and NIST frameworks.• Collaborated with cross-functional teams to integrate security into DevOps workflows, resulting in a 20% reduction in time-to-detection for security threats.• Provided training on secure coding practices and security awareness for developers, IT staff, and management.

Chicago, Illinois, United States

• Monitored network traffic and logs using SIEM (Splunk, ArcSight) to detect and investigate security incidents and vulnerabilities.• Performed threat intelligence analysis to stay ahead of emerging threats, leading to the proactive mitigation of 10+ advanced persistent threats (APTs).• Implemented multifactor authentication (MFA) and encryption protocols for sensitive systems, improving overall security posture.• Conducted security audits and penetration tests, providing actionable recommendations that improved compliance with industry standards.• Managed firewall, VPN, and IDS/IPS configurations, ensuring the integrity of perimeter defense systems.• Collaborated with stakeholders to draft and implement security policies aligned with PCI DSS, enhancing the organization’s compliance and risk management.

Austin, Texas, United States

• Assisted in the administration of security infrastructure, including firewalls, VPNs, and IDS/IPS systems.• Conducted daily security log reviews, identifying anomalies and reporting potential breaches to senior engineers.• Supported vulnerability management by running automated scans and coordinating patch management with the IT team.• Researched and implemented security best practices for password policies, system hardening, and network segmentation.• Provided first-level support for incident response, assisting in the resolution of malware infections and unauthorized access events.