Kc J Email & Phone Number

Los Angeles, Ca, Us

New York, Ny, Us

• Spearheaded the development and implementation of comprehensive cloud security strategies, encompassing architecture, implementation,and maintenance of security infrastructure and tooling.• Collaborated cross-functional teams to ensure that architecture solutions are compliant with industry-standard security frameworks and bestpractices.• Implemented multi-tiered authentication and access control strategies using RBAC/ABAC to provide enhanced security.• Evaluated new security technologies through vendor assessments and POCs to enhance visibility into cloud infrastructure and driveimprovements.• Fostered a "shift-left" security mindset by integrating security into the secure SDLC.environments.• Implemented standard procedures for the administration, policy management and lifecycle management of the SIEM/Log Managementplatform.• Performed security vulnerability and gap analysis assessments to isolate potential risks and developed remediation plans to improve securityposture.• Implemented a cyclical security vulnerability remediation process, leveraging various sources such as penetration tests, internal scans, cloud-based alerting tools, Lacework security platform, and security incidents to identify potential vulnerabilities and events.• Developed and proposed robust design standards for secure API implementation, aligning with OWASP Top 10 API Security Risks,encompassing vital aspects such as authentication mechanisms, rate limiting, one-time passwords (OTP), and encryption practices.

Us

• Implemented network security solutions, including firewalls, VPN, and intrusion detection/prevention systems to secure the organization's network perimeter.• Conducted regular vulnerability assessments, analyzed results, and recommended remediation activities to minimize security risks.• Designed and implemented security policies and procedures to ensure compliance with industry standards and regulations.• Managed cloud infrastructure security in AWS, including security group configurations, identity and access management, and data encryption.• Collaborated with cross-functional teams to develop and implement security incident response procedures.• Conducted regular backups and disaster recovery tests to ensure the availability of critical systems.• Assisted with the implementation of security policies and procedures to meet regulatory requirements.• Streamlined vulnerability management and remediation efforts through the setup of monitoring and alerting systems for both infrastructureand applications.

Lewisville, Texas, Us

Designed and executed a multi-cloud platform IAM architecture, including policies and authentication services.• Conducted regular security reviews and provided detailed documentation of findings and recommendations to product and IT teams tomitigate risks and vulnerabilities.• Worked closely with cross-functional teams to implement efficient and secure infrastructure development strategies within the cloud, alignedwith best practices from CIS and NIST frameworks.• Enhanced automation for both remediation and preventative controls to ensure compliance across the cloud infrastructure.• Designed and developed an end-to-end DevSecOps pipeline using continuous integration, continuous delivery, and automation tools.• Implemented and maintained security controls to ensure compliance with SOC 2, HIPAA, and PCI DSS standards.• Collaborated with security professionals and development teams in developing secure systems.• Maintained, configured, and monitored AWS platform resources and web applications.• Developed automation scripts and security policies to ensure secure data storage and access control.• Reduced environment provisioning and configuration management timeframes by 50%.• Collaborated with security professionals, development, and operations teams to enact secure system architecture design.