Post Job Free

Resume

Sign in

Engineer Security

Location:
Brooklyn, NY
Posted:
October 10, 2018

Contact this candidate

Resume:

Courtland (Cory) Van Hoozer

*** ****** ***, #**

Ridgewood, NY 11385

m: 929-***-****

ac7cc9@r.postjobfree.com

Professional Summary

Vision-driven change agent with career-long record of IT security engineering and administration success for leading organizations

Proven talent for aligning business strategy and objectives with established information technology paradigms to achieve maximum operational impacts with minimum resource expenditures. Efficiency-focused thought leader with expertise spanning incident response, security operations, policy creation and modification, Scrum methodologies, stakeholder liaison, technical documentation, identity and access management, user support, cross-functional team leadership, complex problem-solving, client relationship management, and project management. Exceptionally dedicated professional with keen interpersonal, communication, and organizational skills.

Professional Experience

Federal Home Loan Bank Chicago, December 2016 – August 2018

SECURITY OPERATIONS – SECURITY ENGINEER, December 2017 – August 2018

Serve as single point of contact for all AWS IAM-related requests, including: IAM user, group, and/or role design/modification and custom JSON policy creation in a multiple account AWS infrastructure.

Modify AWS Simple Storage Service Bucket Policies to limit access in a least privilege model.

Develop top-to-bottom AWS security group for application webservers from Dev/UAT/Prod.

Redesign overly permissive security group rulesets across multiple AWS accounts/regions.

Create/modify A/CNAME records.

Complete internal Agile/Scrum training from Senior Scum Masters.

As Security Operations Scrum Master: resolve lack of planning based on feedback from stakeholders; greatly increase quality of work and team morale; create a dynamic work environment that allowed individual team talents to flourish.

Improve relationships with stakeholders via open and transparent communication.

Review and resolve Enterprise Security Incidents.

Design alerts with Senior Splunk Architect.

Deliver normal hour/on-call incident response.

Document events with IR Forms.

Administer internal/transit-VPC/edge Palo Alto Firewall Devices using Panorama Mangement Console (PA-VM, PA-220, PA-3020).

Create security rules; blacklist malicious IPs; whitelist URLs; identify GeoIP exceptions.

Discuss WAF policy tuning with in-house application developers.

IDENTITY MANAGEMENT – SECURITY ADMINISTRATOR, December 2016 – December 2017

Guided AWS identity & access management (IAM); modified IAM policy upon request; recommended AWS best practice changes in IAM policy strategy.

Aided transition from AWS access key authentication to instance attached role-based authentication.

Resolved access issues with application developers.

Normalized application user lists to verify against centralized identity management tool.

Conducted mass information pulls from Active Directory.

Created scripts to help Service Desk quickly scan user objects.

Ensured compliance of security group membership change automation and reporting.

Provided Tier II support.

Oversaw application access provisioning/de-provisioning, as well as file/folder permission changes.

Gibsons Restaurant Group LLC, May 2016 – December 2016

IT ADMINISTRATOR

Performed PowerShell cleanup, adds, removals, and edits of existing AD objects.

Troubleshot utilization and broadcast storm.

Edited firewall.

Oversaw Dell Sonicwall security/router and unmanaged switches.

Installed battery backups; cleaned up cabling; troubleshot network back to the patch panel.

Delivered general break/fix and end user support for 14 restaurants.

Conceptualized basic admin scripts (mass AD edits, find object with search term, info exports, etc.).

Automated new hire/termination procedures with PowerShell.

Designed script to pull system information from workstations and servers.

Supported 500 end users with no escalation from CEO/owner to line cook.

Serviced Windows Vista through 10 in remote and desk-side environments.

Standardized workstation imaging using sysprep and rescue media.

Added a dynamically populated HTML signature to emails through an Exchange transport rule.

Established network monitoring using PRTG.

Developed a corporate asset policy.

Led IT projects with both my own and other IT employees.

Created IT documentation template to standardize IT documentation.

Overhauled Spiceworks Helpdesk Suite.

Taught proper ticketing etiquette.

Reyes Holdings LLC, June 2014 – May 2016

GLOBAL IT SERVICE CENTER ANALYST

Served as IT Administrator for a variety of food and beverage distributors, including Martin Brower (McDonalds & Chipotle), Great Lakes Coca-Cola Distribution, Reyes Beverage Group, and Reinhart Food Service.

Administered Active Directory, Exchange (basic), Cisco (CUCM, UCCX, CUC), Citrix, and Service Desk Plus servers.

Monitored and troubleshot networks, servers, and applications via SolarWinds.

Demonstrated expertise in Cisco IOS, JD Edwards, AS400, SAP, CAS SFA, SharePoint, Manhattan WMS, SolarWinds, AirWatch, and Service IT/Now.

Delivered corporate desktop support to C-level executives and below for workstations, laptops, thin clients, mobile devices, tablets, printers, desk phones, and A/V equipment.

Education and Credentials

Professional Training in Networking Systems and Technology, 2015

Harry S Truman College, Chicago, IL

Relevant coursework: VLANs, Spanning Tree, IPv4 Addressing and Subnetting, Introduction to IPv6, Wireless LAN Security, Static Routing, Dynamic Routing (RIPv2, EIGRP, OSPF, BGP), ACL, NAT/PAT, Troubleshooting the network, SNMP, managing IOS, IOS licensing

Cisco Certified Entry Networking Technician (CCENT), 2016

Harry S. Truman College, Chicago, IL

Additional Information

Interests: Powerlifting, Discord community manager, PC gaming, Video editing, YouTube creator, Comedy enthusiast

References available upon request



Contact this candidate