Jordon Lovik Email & Phone Number

Farmington, Ut, Us

San Francisco, Ca, Us

New York, New York, Us

Vulnerability Management Process Operationalization:Spearheaded the operationalization of the vulnerability management process, transforming it into a streamlined and efficient operation.Utilized containerized cloud-first tooling to provide daily dashboard updates, enhancing visibility and enabling informed decision-making in real time.Mentorship and Guidance:Played a vital role in mentoring junior employees, offering valuable insights, guidance, and escalation support to facilitate their growth and development.Provided ongoing assistance and knowledge-sharing, empowering junior team members to navigate complex challenges and contribute effectively to projects.Attack Surface Mapping and Recon Expertise:Led and directed initiatives for manual Attack Surface Mapping and Recon, uncovering multiple critical findings that bolstered the organization's security posture.Demonstrated proficiency in identifying vulnerabilities and potential attack vectors, contributing to the enhancement of proactive threat mitigation strategies.Cross-Departmental Collaboration:Cultivated strong working relationships and established bilateral bridges between engineering departments through consistent communication and rapport building.Facilitated knowledge sharing, aligning goals, and promoting a collaborative environment that fostered cross-functional success.DevSecOps Tool Development:Played a pivotal role in the development of an in-house DevSecOps tool that facilitates the creation of Secure Images, ensuring teams have a robust foundation for building secure applications.Leveraged technical expertise to contribute to the tool's architecture, resulting in improved security and streamlined workflows across the organization.

Newark, California, Us

Led the implementation of Cloud Security Posture Management (CSPM) and Cloud Workload Protection Platform (CWPP) across a multi-cloud environment, developing and fine-tuning detection policies tailored to specific organizational use cases.Contributed to the creation of the Secure Image Factory, an internally developed GitHub Actions application that builds and publishes hundreds of security-hardened images with pre-installed security tools for developer consumption. Additionally, automated Attack Surface Management using existing tools and available datasets, significantly enhancing security operations.Made multiple critical security discoveries, collaborating closely with SOC and remediation teams to resolve vulnerabilities and strengthen the security posture. Built and deployed a blue-green deployment model in AWS for Burp Suite Enterprise DAST tooling using Terraform, optimizing continuous security testing.Assessed cloud architecture for both SaaS and legacy on-prem products, ensuring robust security integration. Managed the Vulnerability Management program, including the migration of VM dashboarding to Qlik in alignment with business initiatives. Authored extensive technical documentation and process articles for internal teams, providing valuable reference materials.Managed legacy on-prem patch management solutions and participated in a 24-hour on-call schedule as Level 3 support for SOC incidents, ensuring rapid response and resolution.

Austin, Texas, Us

Responsible for Vulnerability Management company wide, developing and tracking mitigation plans, coordinating security fixes with appropriate teams and systems owners, and producing reports to help drive down security risk. Work closely with operations teams to facilitate remediation activities, and with management to articulate the risk posed by outstanding vulnerabilities. Identifies and assess attack vectors and system impacts to ensure the proper prioritization of activities focused on driving down risk. • Ensure the effective mitigation of security risks for over 20,000 + endpoints• Threat modeling using STRIDE for new component reviews• Owner of company wide bug bounty program (Bugcrowd)• Provide actionable reports and technical guidance to teams responsible for deploying security fixes• Coordinate multiple action plans and track to completion, including the facilitation of a formalized policy exception process if applicable• Develop risk rating definitions to allow for accurate allocation of resources• Utilized Attack Surface Management tool Censys.io to find previously unknown assets and services• Custom build tools to interact with security applications and automate workflow• Monitor vulnerability feeds and triage based on criticality including Zero Day vulnerabilities• Design and build automation in Python/PowerShell/Bash/Splunk to facilitate enterprise needs.• Produce vulnerability metrics for technical teams and senior leadership by building custom Splunk dashboards (C-Suite and Board)

Performed security research which produced multiple critical findings in client applications and tools that brought about fundamental architectural changes across the business. Discovered Critical web application vulnerability CVE-2019-13379. Partnered with clients to realize their business needs through technology utilizing industry leading security controls. Worked as a direct contact with clients, developing relationships and fostering trust.Responsibilities:- Maintained the security and integrity of client networks through security controls and logging- Partnered with clients on their first steps into moving workloads into the Cloud (AWS)- Performed security audits, network monitoring, and log reviews on security appliances- Designed, install and support servers, firewalls, switches and networking infrastructure across multiple industries- Championed and develop policies and procedures to multiply the effectiveness of limited resources- Participated in 24/7 on-call rotation

Santa Ana, California, Us

In charge of all purchasing, installing, and maintainence of IT Systems at AFTCO. Below is a more detailed list my job description. Responsibilities:- Design, Support and maintain all core network services like SFTP, Exchange, DHCP, DNS, and Active Directory- Level I, II and III support to end users and management- Perform daily system monitoring and environmental health checks- Planning, implementation, supporting and maintaining servers, firewalls, switches and networking infrastructure- Evaluate and recommend and implement emerging technologies and strategies to increase reliability and manageability- Handle every technical aspect of the company's technology assets (both informational and mechanical) with excellent documentation and communication skills- Maintain reliable backup solution and disaster recovery (Barracuda Networks)- Utilized open source software when applicable- Troubleshoot issues across multiple operating systems Windows 7, 8, 10 as well as OS X and Linux

Newport Beach, Ca, Us

Manage and maintained a hosted Database as well as day to day operations including but not limited to; - Sole Onsite support for all technical issues- Networking switches/routers/copiers/computers- VoIP phone system(Mitel)- Video Surveillance system- New hardware and peripheral deployment (Mac and Windows)- Remote desktop/phone support- New user setup and termination- User application training Windows 7, 8 Office 2010 Suite, Photoshop CS3 - CC, Church Community Builder

Newport Beach, Ca, Us

Responsibilities: Create lighting for concerts and events. Present visual media for services. Edit video for services and events.

Bachelor Of Science (B.S.), Game Art And Design

Full Stack Web Development Certification, Computer Software Engineering

High School