Anthony.
Security Engineer
A Certified AWS Solutions Architect - Associate and passionate Information Security Engineer who loves securing Cloud Infrastructure and building automation.
Hi, my name is
About Me
My role as an Information Security Engineer is to keep the cloud infrastructure (AWS / Azure) secure from malicious attackers. This role gives me the opportunity to work with all Engineers across the table from SRE to Product Managers and come up with solutions to secure infrastructure and code vulnerabilities. I love building cloud infrastructure using Terraform and automate away time consuming tasks using Python. For fun, I work on web development projects.
Here are a few technologies I've been working with recently:
- AWS
- Azure
- Python
- Powershell
- Terraform
- JavaScript
- React
- Node
- Express
- SQL
Experience
- Deploy AWS Web Application Firewall (WAF) using Terraform and AWS Firewall Manager to protect GLG web applications from common web exploits, address OWASP Top 10 security risks, and to adhere ISO 27001 standards
- Collaborate with Product Software Engineers to remediate all levels of Security Risks found in our yearly public-facing penetration test audits that ensure the company maintains system quality and integrity which, in return, will enable future new business partners
- Create multiple AWS Python scripts to automate the transition of legacy apps to our new Security layer by creating CloudFront distributions, updating DNS weighted policy, and monitoring SumoLogic logs for HTTP errors related to the applications
- Build a custom Mocha JavaScript automation penetration tool to test that new web applications are secure from SQL Injection (SQLi) and Cross Site Scripting (XSS) exploits before they are pushed live
Systems Engineer
Jul 2018 - Apr 2021
- Automated the build of Microsoft 2016 domain controllers by using Terraform and AWS Systems Manager (SSM) for scalability and to remediate security vulnerabilities
- Automated the process of testing SQL server upgrades by using MS SQL Server Distributed Replay along with AWS SSM
- Created backup and disaster recovery plans for our servers (on-prem and cloud) and data using services such as AWS Lifecycle Manager, AWS S3, ManageEngine (AD backup), and Druva (Office365 backup)
- Managed the companies daily use of Microsoft O365 and Azure
Systems Analyst
Aug 2016 - Jul 2018
- Improved Helpdesk ticket MTTR from 2 hours to .8 hours by introducing round robin to automate ticket assignment
- Maintained the companies website using Jekyll, CSS, HTML, Javascript
- Improved ticket MTTR by 25% and customer satisfaction when I migrated our ticketing system from Salesforce to Zendesk
- Collaborated with Director of IT, VP of Information Technology, and Engineers on implementing new solutions to help day-to-day operations
- Provided managed service support for Windows users and Windows Server 2012 R2 on virtual machines using VMware
- Assisted with critical system outages and innovated an immediate backup plan to get users working
- Provided end-users with software and application support using T-SQL for Microsoft SQL Server
- Created/maintained the company’s website using Wordpress
- Used SEO best practices to elevate the company’s web presence (used Google My Business, Google Analytics, etc.). Key result: increased web traffic by 18%
Education / Certifications
2011 - 2014
Bachelor of Science in Information Technology - Computer Network Security
New York Institute of Technology
Vice President of Tau Kappa Epsilon (TKE)