Kane N. Email & Phone Number

Surry Hills, New South Wales, Au

Dealing with internal security engineering topics like:- Zero Trust- Endpoint, Network and SaaS security- Third-Party Risk management- Vendor Pentesting and more.

Ottawa, On, Ca

At Shopify, I led our Zero Trust Engineering team, which was comprised of a mix of IT, Developer and Security squads. This consisted of Client Platform Engineering, Network Engineering and Security Development. Our mission was to secure internal assets like endpoints, networks and software that enable Shopifolk to do their best work. Some of the teams highlights:- Moved to a new network architecture across all of our offices, saving $700k annually and directing money into the Shopify merchant ecosystem. - Built out a customised application allowlisting tool, ensuring only approved applications can run on workstations reducing SaaS spend and security surface area. - Rolled out managed M1 Macbooks to every employee, replacing prior unmanaged devices. New devices aligned to the CIS benchmarks and had additional controls like enterprise browsers. - Dealt with significant tech debt in the teams, moving our MDMs to cloud and reducing operational overheads and increasing team momentum. - Built several internal tools to help customise security to Shopifys needs including zero trust posture tooling and more

Sydney, Nsw, Au

I started at Atlassian as the first enterprise security engineer and built the team from the ground up. We grew to be a high-performing and diverse team that has built usable security for every Atlassian employee and our customers. As our team grew, we split into three distinct programs: Enterprise Security, Third-Party Risk Management and M&A Security. The team members were based worldwide, and I led the global team.Some of our highlights during that time were: - Built a custom zero trust architecture, before off the shelf tooling was available in 2017. - Rolling out Yubikeys and WebAuthN in 2018, before major adoption started.- Hardened endpoints adopting CIS benchmarks and dealing with BYO security, enforcing the usage of hardened corporate devices to access sensitive resources. - Saved the company over a $1 million per year in costs from SaaS consolidation.- Helped the company through SOX, ISO27001, SOC2, HIPAA and FedRAMP to resulting in significant enterprise customer growth.- Onboarded several acquisitions securely into the business, helping them adopt platform components for long term secure design.

Sydney, Nsw, Au

London, Gb

Here I worked as a security software engineer in a client-facing consultant role. I was primarily focused on offensive security with a specialty in enterprise security. Much of my work was on reverse engineering and exploiting mobile applications and networks. Projects often involved security research, building PoCs and presenting to various government and enterprise clients. I also completed several self-driven projects to improve my customer's digital forensic and incident response procedures. This was building systems in Python and Go with standard DevOps practices using tools such as Jira, Bamboo, Bitbucket, Ansible and others.

London, Gb

My time at the UK gov was spent leading the R&D forensic team, we dealt with improving forensic procedures and dealing with edge cases involving devices where data could not be forensically extracted using normal means. This required building custom extraction tooling, automating forensic processes with code and building custom software. I worked on a number of high-profile corruption, bribery and fraud cases such as LIBOR rigging, Panama Papers and more.

London, Gb

Lancaster, England, Gb

Early career work gaining my first experience in DFIR.