Ryan Goyette Email and Phone Number

● Created and implemented company wide security policies. ● Reviewed company to company security questionnaires ● Assured security compliance with SOC2, Sig Lite, and ISO ● Maintained and performed Risk Assessments ● Assisted in reviewing and applying security to Terraform Infrastructure.

● Converted existing chef and ansible code into Terraform. ● Managed the AWS Cloud infrastructure via Terraform for a widely used public application. ● Created and used python scripts in order to gather information on existing AWS infrastructure.

Red Team: Created documentation and penetration testing procedures for a full fledged Red Team. This is accomplished by utilizing vulnerability scanning, attack surface analysis and reduction tactics, attacks against publicly facing interfaces, as well as EC2/S3/permissions and privilege escalation. Cyber Security: Created infrastructure alerting, alert resolution, threat detection/mitigation/resolution.Networking Security: Created a secure AWS network by putting infrastructure behind AWS VPC and a VPN. DevOps: Created and maintained infrastructure for 3 separate AWS environments.

Provide county wide support for security policy development, planning, and support.Developed disaster recovery, business continuity, data loss prevention, and data retention plans and policies.Developed and implemented security policies based around the NIST 800-53 standards and CIS 20 Controls. Advanced knowledge on managing Outlook/Office 365 security and administration policies and rules. Defended against various spoofing and phishing attack campaigns against the WISD. Performs cyber security assessments for all Washtenaw County K-12 school districts.Experienced with running multiple penetration testing tools within Kali. Co-Authored an informative security guide on CIS 20 Controls for METL.Experienced in remediating a wide variety of attacks on computer systems and users (Emotet virus, Dharma Ransomware, Phishing and Spoofed emails).Established networks, VLANs, created and managed DNS and DHCP servers, and experienced in subnetting.Experienced at installing, configuring, and maintaining network infrastructure.Experience with monitoring networks and troubleshooting outages/routing/network issues.Experienced with installing and configuring servers, VMs, upgrading and maintaining servers.Experience with Wireshark, Nessus, OpenVAS, Nmap, and other cyber security tools. Experience with backing up/restoring files, including recovering files from encrypted ransomware attacks.