Senior Cybersecurity Engineer
Mclean, Va, Us
Cloud Safeguarding team - Served as a cloud technology SME during the 2019 Capital One data breach and continuously improved the enterprise cloud security posture. Specific accomplishments include: - Worked closely on the data breach from the point it became known to Capital One. Ran CloudTrail, VPC Flow Log, GuardDuty, and Macie investigation in Snowflake, Kibana, and Splunk to report status and analysis to senior leadership and provide evidence to U.S. and Canadian government representatives, and in support of criminal prosecution- Developed and maintained custom cross-account Lambda automation to enable full engineering and lifecycle ownership of Amazon GuardDuty in one of the largest enterprise deployments of the service outside of Amazon- Wrote over a dozen production SOC alerts based on various cloud data sources, including CloudTrail management and data event logs, GuardDuty, and VPC Flow Logs to solve for over 40 different cloud data exfiltration risks and use cases. Very skilled in SQL, Snowflake, Lucene, and Kibana. - A participant and representative in the DLP Program from its inception, which was stood up as a result of the data breach- Held certifications in all three major cloud environments, the only associate at Capital One to do so