Michael Ferdinand Email & Phone Number

Twin Falls, Id, Us

Redwood City, Ca, Us

Santa Clara, Ca, Us

IAC configuration for deployments within Cloud Environments utilizing Enterprise grade IAC configuration management, including services such as servers, load-balancing, containers, and Identify Access Management following internally built hardening standards with IAC Policy checks. Developed python ingestion script for SAST result to format json output into the required schema for GitLab vulnerability reporting. Leverage GitLab Enterprise as software configuration management, working alongside DevSecOps on implementation of compliance framework to enforce security automation for CI/CD pipelines. Validation that integrations between vendor tooling and internal solutions are properly configured and automatically upgraded as needed.

Santa Clara, Ca, Us

Conduct manual web application penetration tests on critical application features or production releases prior to deployment, utilizing Burp Suite. Lead the initiative to ensure comprehensive secure developer training throughout the organization, collaborating with HR, IAM, Training, and Development leaders to achieve company-wide compliance. Contribute to the implementation of a cloud-focused environment, offering support to application teams and cybersecurity engineering during the rollout. Perform manual and automated code reviews for Java, JavaScript, Terraform, and Python, identifying vulnerabilities and offering remediation guidance. Support Security Champions integrated within development teams by providing assistance with security inquiries and promoting best practices. Collaborate with the DevOps team to automate code pipelines using Jenkins and GitLab, integrating Checkmarx (SAST), Snyk (SCA), Gitleaks, and other Open-Source utilities for comprehensive security testing at scale.

Remote, Us

San Jose, California, Us

Implementation of OWASP ZAP docker container within Jenkins for streamlined automated penetration testing on multiple environments, including remediation efforts while working closely with the head of engineering. Development of Terraform modules for creation of IAM, Security Groups, EC2, Cloudwatch, Lambdas, SQS, SNS and Parameter store variables within AWS. Responding to alerts received from AWS Cloudwatch, GuardDuty, and Trusted adviser. Integration of Jenkins, Aviatrix VPN, New Relic, Atlassian products, and Grafana utilizing SAML 2.0 and Oauth Google configuration to streamline access control. Configuration of static source code analysis employing SonarQube continuous inspection and OWASP Dependency-Check on Jenkins builds to promote a Secure SDLC. Creation of VPN infrastructure across multiple AWS accounts and VPCs employing Terraform while utilizing Aviatrix systems for connectivity and role based restrictions. Patching of vulnerabilities found by AWS Inspector.

Wetherby, West Yorkshire, Gb

Implementation, maintenance and configuration of Spacewalk (Red Hat Satellite) to streamline creation of new systems, including patch/package management and provisioning new servers. Inspect and remediate vulnerabilities found via QualysGuard, including creation of new network maps, host scans, and ticket creation policies. Automate manual processes through the development of shell scripts. Upgrading ELK(Elastic/Logstash/Kibana) stack and Docker swarm; server migrations and reconfiguration within RPM based infrastructure. Provisioning firewall rules (iptables, firewalld), anti-virus software (ESET), and removal of outdated encryption standards. Creation and configuration of new Virtual Machines employing VMware vSphere. Responsible for implementation of Active Directory authentication module within on-prem Linux Environment (CentOS, and Oracle) utilizing Kerberos.

New York, Ny, Us

Proven work performance resulted in promotion to Senior Analyst. Administering user access controls via Active Directory and Okta. Incident response during system outages, while in the office or during on-call schedule; including diagnosing utilizing Splunk and New Relic, contacting the team responsible for resolution through VictorOps, and alerting over 3000 users of ETA for analysis sent using Windows Power Apps. Manage Security Events with The Media Trust relating to ad-based malware attacks across Gannett websites, notify the campaign manager, and disable the malicious ad until patched. Maintain company wide JSON website configurations within github, while performing testing, and verification before new releases via Jenkins.

Jacksonville , Fl, Us

Successfully assisted in the migration of thousands of customer websites, email servers and databases; utilizing ssh terminals along with internally created bash scripts, during a merger with another company. Respond to security and policy violations broken by end users and work to remove the offending material or explain to the customer they will need to find a new hosting provider. Manual setup of new Linux servers including manual installation of Apache, MySQL and PHP to meet the users needs.

Greenwood Village, Colorado, Us

Tempe, Az, Us

Tempe, Az, Us

Responsible for streamlining code functionality and standards utilizing C++ with DirectX and TorqueScript. Optimizing character and AI scripts, allowing gameplay to function at the intended speeds. Planned and executed menu, loading screen and asset-building parameters to meet highest quality standards in collaboration with the art department.

Master Of Science - Ms, Cybersecurity & Information Assurance

Bachelor Of Science - Bs, Cybersecurity & Information Assurance

Bachelor Of Arts - Ba, Video Game Design