Information Security Specialist with passion for aligning security architecture plans and processes with security standards and business goals. Extensive experience developing and testing security framework for cloud-based software. Versed in robust network defense strategies, expertise in managing accreditation packages, performing security reviews, and identifying gaps in security architecture. Proven ability to develop and implement security risk management plans, conduct vulnerability management, conduct risk analysis, and ensure compliance with information security policies and procedures. Skilled in evaluating, testing, and recommending information systems policies and procedures to mitigate security risks. Adept at managing user accounts, investigating vulnerabilities, and resolving complex malware and intrusion issues. Excellent result-oriented, attention to detail, organization skills, problem-solving and analytical skills, with the ability to quickly adapt to evolving security challenges. Collaborative team player who works closely with IT, development, and leadership teams to ensure the confidentiality, integrity, and availability of critical information assets. different Operating Systems and diverse operating systems

• Knowledge of common security, compliance and privacy frameworks and regulation e.g. ISO, NIST, CIS, SOC1, SOC 2, HIPAA, CCPA, PCI DSS
• Demonstrated expertise in conducting cybersecurity risk assessments and compliance activities, focusing on product security.
• Extensive background in DevSecOps, encompassing the seamless incorporation of security tools into CI/CD pipelines
• Demonstrated programming proficiency in Python, Java, SQL.
• Skillful in scripting languages for automating security tasks and processes.
• Experience in ISO compliance and risk analysis
• Skilled in managing SOX compliance
• Proficient in SOC2 Audit and Compliance Reporting
• Experience in utilizing load balancers, routers, and switches.
• Strong problem-solving abilities and capable of responding effectively to security incidents and vulnerabilities.
• Experience using antivirus and threat hunting tools such as CrowdStrike Falcon endpoint protection.
• Proficiency in Infrastructure as Code using Terraform or CloudFormation. a range of security methodologies, technical security solutions (SIEM, IDS/IPS, Firewall Solutions, etc.)
• Experience in FedRAMP or FISMA compliance and risk management
• Excellent with automation tools and techniques for security monitoring
• Strong in data quality management, data visualization, data and trend analysis
• Excellent in fraud management, monitoring, surveillance, and testing
• Proficient in security practices for Windows and RHEL operating systems.
• Hands-on expertise in AWS and its suite of security solutions