Mastercard

Lead Information Security Engineer working with many groups inside Mastercard to provide bespoke deployment for test environments such as secured malware detonation, experimental software testing and development, etc. Full stack infrastructure as code deployment for fast iteration. Development, building, and operation of Capture the Flag (CTF) environments for government scale Cyber Defense Exercise (CDX) and CTF competitions.
    • Utilized IaC tooling (Packer, Terraform, Ansible) to deploy competition and evaluation environments at scale, with events exceeding 1000 virtual machines across multiple geographically distinct regions, targeting traditional on-premise and cloud workloads
    • Packer template construction for deployment to VMC on AWS, vSphere, and AWS environments for quick efficient redeployment of servers to test environments, CTFs, etc saving hundreds of thousands of dollars in development, implementation, and operational costs
    • Broadcom Aria Operations Suite deployment, configuration, and integration for constructing views and reports based on whole environment metrics and datasets
    • Design, plan, build and operate national and international CDX competitions for governments and financial, power, and telecom sectors to practice cooperation in the face of massive threat actor attacks and mitigation at an unprecedented scale
    • Developed custom Cyber Security challenges that emulate realistic medium-sized enterprise infrastructure with realistic weaknesses to train and evaluate security professionals

Lead Information Security Engineer

GRIMM Cyber

Security Engineer working with various teams on multiple projects, with primary focus on crafting CTF style educational tools for training, cloud platforms focused on self-training, IT / Security conferences running CTF competitions, and open range style cyber resources for educational purposes. 

In addition, performed active roles in both security assessments and penetration testing with project management and cooperative work with clients.

    • Packer, Ansible and VMWare build automation
    • CTF Challenge research and design
    • Docker build automation and deployment
    • GCP Security Assessment
    • Cryptocurrency phone app security assessment
    • Burp Suite based web page security assessment
    • Deployment to VMWare Learning Platform, Cyber Ranges, vSphere, etc

Security Engineer

BLW SecOps LLC

Senior Linux and IT security engineer, 24/7 on-call and primary troubleshooter for diverse systems. Manage
system and application configuration and proactive IT security hardening while working with development
team for improved client experience, efficiency, PII and server security.

• Linux System troubleshooting, patching, configuration, security auditing and hardening
• Production and Testing environment configuration management for Dev team
• Evidence and artifact data acquisition and documentation for ISSO during federal security audits
• Application testing and troubleshooting, system performance testing, and reliability monitoring
• OpenVPN Access Server installation, configuration and maintenance
• AWS Server build and Twiki application installation and maintenance

Owner

Elemica

Senior Unix and security devops engineer in a project to evolve the company to cloud based infrastructure in AWS from legacy physical server based environment. Managed infrastructure and code base with Chef and Git / GitHub. Facilitated close collaboration with developers for all phases of code production, testing and deployment.

• Versioning and deployment via Chef, Git / GitHub, Chef Test Kitchen, and Jenkins
• Infrastructure management in AWS including IAM, CloudFront, EC2, Route 53, and others
• Cloud based monitoring and alerting using Sumo Logic, CopperEgg, CloudWatch, and CloudTrail

Senior Development Operations Engineer

Black Hills Corporation

Enterprise IT and physical security engineer working in NERC / FERC regulated environments. Managed electronic and physical security across two states. Attained channel partner status for Ocularis and Pro-Watch saving thousands of dollars per year in maintenance and support.

• Enterprise wide security using ArcSight, Nexpose, RedSeal and others
• Physical security installation and maintenance including Ocularis, Pro-Watch and Ocularis X
• NERC / FERC audit compliance including documentation, proactive hardening and monitoring

Corporate IT Security Analyst II

Denver Public Library

Unix Administrator and Security Engineer working with IT support group. Rebuilt the entire Unix server environment using Solaris Zones. Managed all PCI DSS audits for the library with 100% compliance. 

• Solaris (with Zones), SLES, and RHEL security and administration
• Managed Apache 2.2 with Drupal webservers and dev / stage / production environment
• Implemented organization wide security and audit structure based on SANS training

Associate Information Technology Systems Administrator

I solve IT problems through learning, understanding, and automation of critical business processes.

Versatile and tenacious problem solver with broad, holistic experience managing/administering security for servers, cloud infrastructure, applications, firewalls, networks, and personal devices. Security and Unix focused with excellent troubleshooting skills including problem solving in service of securing systems. Proactive facilitator and excellent communicator with over eight years of remote project management and team effort coordination connecting resources across the world.

Taplio

Brad Woodcock's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Brad Woodcock's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Brad Woodcock's Linkedin Analytics