Latio Tech

A trusted resource for cloud & application security product comparisons - opinions are my own and links below:

- Cloud Security List - https://list.latio.tech
- In depth product analysis newsletter - https://latio.beehiiv.com
- YouTube Channel - https://youtube.com/@latiotech
- GitHub Testing Repo - https://github.com/latiotech/insecure-kubernetes-deployments

I receive no financial incentives from any company we feature!

Founder & Analyst

PagerDuty

Securing the world's operations tools - the right information at the right time can change the world!

- FEDRAMP, FEDRAMP, FEDRAMP!
- AWS, Containers, K8s, SDLC pipelines, and a bunch of other cloud native stuff

Security Engineer III

ReliaQuest

Lead all aspects of product security for GreyMatter, a SaaS security operations platform.

Manage a team of Product Security Engineers to deliver meaningful product improvements such as CSP, RBAC, CSRF protections, and custom scanning logic.

Subject Matter Expert for AWS, Kubernetes, Container, CI/CD, and Code Security.

Lead Threat Modeling Exercises, Developer Training, DevOps Training, and Compliance Attestation requirements (ISO 27001, SOC 2, FEDRAMP, and PCI).

Manage a team of Product Security Engineers to deliver meaningful product improvements such as CSP, RBAC, CSRF protections, and custom scanning logic.

Deploy, develop, and maintain a suite of security tools that enable DevSecOps such as Snyk (SCA, SBOMM, SAST, Container, Cloud, IAC), StackHawk (DAST and GraphQL), GitLab tooling, Sysdig, Prisma Cloud, and many others.

Develop internal cloud security tooling and training using Spotbugs, Cloudquery, OWASP standards and numerous open source projects.

Responsible for the cloud security architecture of over 300 Java SpringBoot MicroServices, running across multiple clouds and clusters. Daily usage of modern DevOps tooling such as Kong, Argo, DataDog, Grafana, and Prometheus.

Responsible for the remediation of hundreds of vulnerabilities, the implementation of modern web security standards, passing SOC 2, PCI, and ISO audits, and successful pentests.

Regular participant in industry thought leadership, sales calls, and customer success initiatives.

Sr. Cloud Security Engineer

Very Good Security

Security architect of Very Good Security Products - compliance automation, data aliasing, secure data processing, and payment multiplexing solutions

Directly managed and collaborated with a team of SME’s across engineering and compliance to maximize the product impact of integrations and framework support

Directly contribute to documentation, technical videos, sales engagements, and feature deployments - both in terms of product guidance and direct development using Ruby, JavaScript, Markdown, Docker, Python, Bash and other technologies.

Develop, maintain, and implement over 200 security automations and monitors across 13 compliance frameworks such as SOC 2, ISO 27001, PCI, HIPAA, NIST and GDPR.

Provide security engineering and architecture guidance for over 100 clients, across most modern clouds, source code control, vulnerability, device management, containerized Kubernetes and security platforms.

Develop 300+ tasks for helping both business and engineering teams achieve compliance and security standards, cross mapping tasks across 13 compliance frameworks and creating monitors for all tasks.

Create and lead combined initiatives across marketing, sales, product, and development teams, bringing major features to market such as quantitative risk management, cloud monitoring, employee onboarding, and new integrations. 

Contributor to numerous open source cloud security projects

Directly maintain and develop implementation guidelines for AWS, GCP, Azure, GSuite, Github, Gitlab, Bitbucket, KnowBe4, BambooHR, Rippling, Gusto, Slack, Jamf, Okta, Jira, Office 365, Azure AD, JumpCloud, Citrix, Snyk, SonarQube, WhiteSource, Kiuwan, Prisma (Twistlock), Splunk, DataDog, Ansible, and more.

DevOps experience contributing to Docker projects and Kubernetes security best practices - from vulnerability scanning with Aquasec to networking with Calico and AWS CNI’s. Contribute to internal security CI/CD security, AppSec and AWS architecture security.

Cloud Security Architect

Responsible for the security of GreyMatter, the world's first open XDR that empowers the full security incident response workflow.

Security implementation and management of IAM, EKS, CI/CD, SAST, DAST, GraphQL API Scanning, SSH, ELK, APM tools, DataDog, Splunk, QRadar, WAF, Palo Alto, Prisma Cloud and everything that goes into securing a modern multi-cloud web platform. 

Implemented proper controls at all phases of the development process: IAM, Kubernetes infrastructure, Gitlab deployment, firewalling and application layer.

Coordination across Dev, DevOps, DevSecOps, Infrastructure, and Security.

Cloud Security Engineer

The Southern Baptist Theological Seminary

Assist Dr. Ted Cabal in creating coursework and grading for Philosophy courses.
Assist Dr. Douglas Blount in grading for Philosophy courses.
Independently teach and manage online courses.

Graduate Teaching Assistant

Spartan Race, Inc.

Led all IT management and support across 42 countries, 250+ annual events, and 400 employees for a company with $100M+ revenue. 

Directly managed a team of three systems engineers responsible for maintaining the health of cloud and on premise environments

Generated $1M+ of annual savings in first year of employment.

Architect of Microsoft stack running in a hybrid cloud - VMWare, AWS, and GCP.

Managed vendor deployments with Apple, CDW, Autodesk, Adobe, Microsoft, VMWare and Google to conduct $2M+ dollars of purchasing a year.

Led successful cyber-security audit and security implementations for financial and healthcare sponsorship deals using NIST and ISO 27001; PCI and HIPAA experience.

GSuite subject matter expert - alpha programs and implementation.

Secured diverse environment of Mac and Windows desktops, laptops, Androids, iPhones, iPads, Kindle Fires, Chromebooks, and Linux machines.

IT Operations Manager

Atlas Professional Services

IT project design and support for over 300 national companies across all sectors

Consultations on hybrid-cloud, colocation, network, security, backup, and data.

Consulted small to medium size businesses on achieving NIST compliance with AWS and on premise data stores.

Demonstrated technical proficiency with the following: Windows Server 2008-2016, Datto, Veeam, Acronis, ESXi 5-6.7, Dell and HP Servers and SANs, various firewalls, switches, and routers, S3, EC2, Citrix, Active Directory, Office 365, GSuite, SQL, Powershell and Connectwise Suite RMM.

Systems Engineer

10+ years in engineering and security before founding Latio Tech to help security engineers cut through the marketing noise and find the technical details of products.

I have a passion for driving security teams as contributors to product (the true meaning of DevSecOps) and built Latio Tech to help connect people with the right products.

Taplio

James Berthoty's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}James Berthoty's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

James Berthoty's Linkedin Analytics