Cyber Security Engineer
CurrentImplemented Cybersecurity policy, procedure, and operations for Managed Service provider across internal network, all operations teams, and customers. Worked the SOC 2 Type 1 security assessment for security compliance and operations across policy, personnel, and operations for internal management network. Developed baselines for customer Governance Regulation and Compliance standards for insurance, various required compliances (FERPA, HIPAA, PCI-DSS, ITAR, NIST 800-171). Engineered efforts for required security and operations standards in MFA, email filtering and security, endpoint security (via EDR, threat hunting, threat assessment, and asset management via RMM). Worked with customer base on required Cybersecurity technology and process including interfacing and communicating with MSSP and CSP. This included numerous integration, migration, and cloud service security processes from documentation, application and service oversight, and validation efforts on behalf of the customer security requirements. Oversaw technology integrations for on-premises and cloud customers. 300+ small and medium business customers with 3000+ endpoints across the country. Work direct with customers on risk mitigations and security policy requirements for their business to meet insurance and compliance standards to decrease cost and risk while maintaining operational and logistics standards for a variety of business types. Oversaw daily security operations including incident response, security software integration, and baseline security settings configuration with Engineering and Help Desk support teamsAssisted in baselining all software and operations support work for Infrastructure of the MSP across multiple teams including baseline configuration management, licensing and software compliance, risk management for other areas of the business, remote operations, business continuity and disaster recovery, and leadership advisement on security opportunities for prospective customers.
