Cybersecurity
I've worked in Cybersecurity since 2008, performing numerous tasks in various roles throughout my career. I've done everything from vulnerability scanning to disaster recovery planning, compliance testing and management, vulnerability mitigation, system auditing and forensics, authoring RMF documentation, and working hand-in-hand with security controls assessors. I currently hold a CompTIA Security+ and ISC2 CISSP certifications as well as a Red Hat Server Security Specialist in Linux certification.
DevSecOps
The vulnerability that gets caught in development is one that is never exploited in the wild. Integrating Cybersecurity into the software development process as early as possible can save a company from millions in lost revenue should one be exploited. I'm adept as integrating vulnerability scanners and static applications security tools into CI/CD pipelines and automating reporting and alerting.
Linux Administration
I've worked with Linux since Red Hat 5. Not Red Hat Enterprise Linux 5, but Red Hat 5 (yes, 15 versions ago). I earned my Red Hat Certified Engineer (RHCE) certification in 2007, and have been actively administering Linux systems for over 20 years. This includes system hardening, service configuration (auditd, dhcpd, firewalld, fapolicyd, SELinux, exim, Sendmail, cups, Samba, etc.), and server software, such as Postgresql, MySQL / Mariadb, JBoss, Tomcat and Squid, and countless others.
