Security Engineer
Feb 2024 - Present
- PassiveLogic
- Full-time
- Current
- Vulnerability management
- Own authenticated scanning with Rapid7 InsightVM across cloud, server, and endpoint environments; track remediation SLAs and coordinate patch campaigns through Jamf and Intune.
- Cloud security
- Use Wiz across GCP and Azure to identify and close attack paths involving public exposure, static credentials, and excessive IAM permissions; consolidate findings into a shared remediation queue.
- Identity and access
- Manage SAML and OIDC federation, SCIM provisioning, workforce identity federation, and Conditional Access in Entra ID and GCP, including guest access and MFA.
- Incident response
- Investigate phishing, business email compromise, account compromise, and token or session abuse using Microsoft Defender for Office 365; lead response through root cause analysis and postmortems.
- Platform risk
- Review internally developed platforms before release for unsafe remote execution, credential handling, and excessive privilege; authored a tiered framework for cloud, OAuth consent, secrets, and infrastructure as code controls.
- Network security
- Design and operate firewall failover, VLAN segmentation, site-to-site and remote access VPNs, and availability monitoring; validate failover under live conditions.
- Audit support
- Own security control evidence and audit responses supporting SOC 2 and GDPR requirements.