Dec 2021 – Apr 2022
- Configured and maintained security controls and monitoring infrastructure across systems and APIs, assessing risk and implementing best practices that cut exploitable endpoints by an estimated 60%.
- Conducted risk assessments and threat/vulnerability analyses, recommending and validating controls that reduced organizational risk and blocked ~95% of automated abuse traffic.
- Applied governance controls to an AI/automation system, including data redaction and access boundaries to prevent unauthorized access and data exposure through automated workflows.
- Developed incident-response procedures and security documentation, and communicated technical risk clearly to both technical and non-technical stakeholders across 4 core services.
Related writing: Wazuh: The Free SIEM and EDR Worth Taking Seriously