Security Engineer
Austin, TX, USA
Security engineer with 12 years of enterprise experience across AWS cloud security architecture, identity and access enforcement, application security, offensive security and AI system security. Builds programs end-to-end, configuring tools, writing runbooks, and shipping automation. Python and Bash are daily tools. Track record of turning early stage security programs into audit-ready, client-facing differentiators.
Salary
GBP 149,987 – 300,000
Deloitte Risk and Financial Advisory
Apr 2021 — Present
Stood up end-to-end security programs for financial services clients. Implemented enterprise SSO/MFA across AWS, Azure and GCP; designed RBAC/ABAC models; administered Okta and Entra ID. Configured CSPM across Wiz, Microsoft Defender for Cloud, GCP SCC and full AWS native security stack. Built Python automation for IAM reviews, secrets rotation and compliance evidence packaging. Embedded SAST/SCA into CI/CD pipelines. Built detection coverage with Splunk SIEM using MITRE ATT&CK-aligned rules. Led penetration tests and red team exercises. Reviewed OAuth 2.0, OIDC, SAML and JWT flows. Led enterprise AI identity security for LLM/RAG/multi-agent systems. Led compliance assessments covering SOX, GDPR and HIPAA aligned to NIST 800-53 and CIS Benchmarks.
USM Business Systems
Aug 2019 — Mar 2021
Conducted application security assessments and cloud architecture reviews for enterprise healthcare platforms. Implemented Azure Entra ID conditional access policies, Sentinel SIEM, Key Vault and Security Center. Designed CI/CD security gates with SAST/DAST scanning. Built MITRE ATT&CK-aligned detection models in Splunk and tuned SOAR playbooks. Led supplier cybersecurity assessments and coordinated evidence collection for SOX, GDPR and HIPAA audits. Administered ServiceNow VRM and Archer.
USM Business Systems
Mar 2017 — Jul 2019
Performed web application and network penetration testing targeting OWASP Top 10 vulnerabilities. Led SIEM detection engineering and SOAR playbook development reducing false positives and automating incident response triage. Configured Okta MFA and SSO policies. Applied Terraform and Azure ARM templates for infrastructure as code security deployments.
USM Business Systems
Dec 2012 — Feb 2017
Administered Azure cloud environments and DevOps pipelines. Performed vulnerability assessments using Nessus and OpenVAS. Implemented data encryption controls and managed IDS and IPS systems for cloud-hosted platforms.
MSc · Computer Science
BSc · Information Technology