CISSP Certified Professional Resume Example

Lead Information Security Architect · Salesforce

San Francisco, CA · 2023 - Present

• Architected and implemented a zero-trust network access (ZTNA) solution across global infrastructure, reducing unauthorized access incidents by 45% within the first year.
• Developed and managed the security roadmap for cloud-native applications, integrating DAST/SAST tools into CI/CD pipelines and improving vulnerability detection rates by 60%.
• Led a team of 5 security engineers in conducting security assessments and penetration testing, identifying and remediating 150+ critical vulnerabilities annually.
• Collaborated with product teams to embed security by design principles, resulting in a 25% decrease in security defects found post-release and accelerated time-to-market for secure products.
• Authored and enforced security policies and standards compliant with NIST CSF, ISO 27001, and SOC 2, achieving 100% compliance in recent external audits.

Senior Information Security Engineer · Google

Mountain View, CA · 2019 - 2022

• Designed and deployed enterprise-wide endpoint detection and response (EDR) solutions, leading to a 30% reduction in average incident response time.
• Managed a portfolio of security projects, including SIEM optimization and privileged access management (PAM) implementation, improving operational efficiency by 20%.
• Conducted regular threat modeling and risk assessments for new services and features, proactively identifying and mitigating potential security gaps for 50+ projects.
• Mentored junior security engineers, fostering a culture of continuous learning and professional development within the security operations team.

Security Analyst · Cisco Systems

San Jose, CA · 2016 - 2019

• Monitored and analyzed security events from various sources (firewalls, IDS/IPS, WAF) using Splunk, reducing false positives by 35% through rule tuning.
• Participated in incident response activities, including investigation, containment, and eradication of security incidents, successfully resolving 100+ incidents.
• Performed vulnerability scanning and patch management for over 1,000 servers, ensuring adherence to corporate security baselines and reducing attack surface by 15%.

M.S. in Cybersecurity · Carnegie Mellon University

Pittsburgh, PA · 2014 - 2016

• GPA: 3.9/4.0, Dean's List
• Thesis: 'Advanced Threat Detection using Machine Learning Algorithms'
• Coursework: Network Security, Cryptography, Secure Software Engineering, Digital Forensics

B.S. in Computer Science · University of California, Berkeley

Berkeley, CA · 2010 - 2014

• GPA: 3.7/4.0, Cum Laude
• Awarded 'Outstanding Senior Project' for developing a secure distributed file system
• Relevant coursework included Data Structures, Algorithms, Operating Systems, Computer Networks

Lead Cloud Security Architect · Contour HealthTech

Seattle, WA · 2021 - Present

• Designed and implemented a comprehensive cloud security framework across AWS and Azure for critical healthcare data, reducing potential compliance violations by 30% and improving audit readiness scores by 25%.
• Led a team of 5 security engineers in migrating on-premise applications to secure cloud environments, achieving a 15% improvement in application uptime and reducing operational costs by 10% through optimized security controls.
• Developed and enforced security policies and standards (HIPAA, HITRUST) for cloud infrastructure, resulting in zero major non-compliance findings in two consecutive external audits.
• Automated security configuration and vulnerability scanning processes using Infrastructure as Code (IaC) tools, decreasing manual effort by 40% and accelerating remediation cycles by 20%.

Senior GRC Analyst · Evergreen Financial Group

Seattle, WA · 2018 - 2021

• Managed enterprise-wide GRC initiatives, aligning security controls with NIST CSF and ISO 27001, which led to a 20% reduction in identified risk exposure year-over-year.
• Conducted over 50 internal and vendor security assessments, identifying and mitigating 150+ critical vulnerabilities across various systems and third-party integrations.
• Developed and delivered security awareness training to over 2,000 employees annually, resulting in a 35% decrease in successful phishing attempts.

Security Consultant · Aurora Cyber Solutions

Portland, OR · 2016 - 2018

• Provided security consulting services to diverse clients, advising on secure architecture, penetration testing, and incident response, contributing to a 10% increase in client retention.
• Implemented SIEM solutions (Splunk, QRadar) for 5 client environments, enhancing threat detection capabilities by an average of 40%.
• Performed vulnerability assessments and penetration tests for over 30 web applications and network infrastructures, identifying and documenting 200+ security flaws.

Master of Science in Cybersecurity · University of Washington

Seattle, WA · 2014 - 2016

• Specialized in Advanced Cryptography, Secure Software Development, and Cloud Security Architecture.
• GPA: 3.9/4.0, Dean's List for all semesters.
• Thesis: "Enhancing Supply Chain Security in Cloud Environments through Zero-Trust Principles."

Bachelor of Science in Computer Science · Tokyo Institute of Technology

Tokyo, Japan · 2010 - 2014

• Graduated Magna Cum Laude with a GPA of 3.8/4.0.
• Coursework included Data Structures & Algorithms, Network Security, and Operating Systems.
• Led a capstone project developing a secure, encrypted messaging protocol, achieving a 99.8% message integrity rate in testing.