ISAAC KABUNGA
Kentucky, USA +1-859-***-**** **************@*****.*** LinkedIn Visa: GC Holder SUMMARY
Cybersecurity Engineer with 5+ years of experience designing and implementing cloud security infrastructure, vulnerability assessment, and incident response across financial services and technology sectors. Skilled in AWS cloud services, containerization, infrastructure-as-code, and penetration testing tools including Metasploit and Burp Suite. Experienced in Zero Trust architecture, CI/CD pipeline security, and forensic investigations, managing 8+ major security incidents across production environments. PROFESSIONALEXPERIENCE
Cyber Security Engineer JPMorgan Chase & Co. USA Jan 2025 – Present
● Implemented encryption-at-rest and SSL/TLS security across 8 production AWS RDS MySQL databases, achieving SOC 2 Type II compliance through automated backup encryption using AWS KMS while coordinating with infrastructure teams.
● Secured 50+ containerized microservices on Amazon EKS clusters using Kubernetes RBAC and network policies, validating risk calculation and settlement applications across production environments.
● Streamlined AI/ML-driven security scanning across 12 AWS CodePipeline CI/CD environments using Jenkins and Ansible, detecting 200+ infrastructure misconfigurations before production release.
● Investigated 8 security incidents using MySQL forensic queries and Shell scripting, coordinating incident response between SOC, DevOps, and risk management teams while preserving evidence. Cyber Security Engineer Uber Technologies Inc. USA Mar 2022 – Jan 2025
● Spearheaded the migration of Uber’s payment APIs to a Zero-Trust architecture using AWS Lambda and Terraform, collaborating with 5 teams to enforce least-privilege access and reduce unauthorized transactions by 1,200 monthly.
● Engineered an automated DevSecOps pipeline integrating Burp Suite and OWASP ZAP into CI/CD workflows, reducing vulnerability remediation SLA from 30 to 7 days and cutting false-positive alerts from 50 to 12 weekly.
● Mitigated critical vulnerabilities in Uber’s microservices security by implementing container runtime protection and WAF rules across 150+ global endpoints, preventing $2.1M in potential fraud losses.
● Orchestrated a multi-cloud secrets management platform consolidation, reducing 25 secret vaults to 6 managed by a single team, limiting blast radius and enhancing security posture.
● Programmed compliance reporting for GDPR/CCPA using Python scripting and Ansible, covering 16 of 20 recurring reports, ensuring audit readiness and reducing manual effort by 200+ hours annually.
● Fortified Uber’s incident response capabilities by leading red team/blue team exercises and integrating SOAR (Security Orchestration, Automation, Response), cutting incident response time from 4 hours to 45 minutes. Cyber Security Engineer Dell Technologies USA Jan 2019 – Mar 2022
● Architected Zero Trust network segmentation using PowerEdge iDRAC10 and Active Directory Group Policies across 850+ endpoints, reducing lateral threat detection time by 2.8 hours through infrastructure collaboration.
● Engineered PowerProtect Cyber Recovery vault with AWS CloudFormation and Terraform, deploying immutable backup isolation across 5 data centers and protecting 12TB of critical data from ransomware.
● Developed Python-based SIEM integration with CrowdStrike Falcon, creating 60+ custom IOCs for Dell Trusted Device telemetry and cutting threat response time from 4.2 hours to 45 minutes.
● Implemented Dell SDL compliance automation using Ansible and Jenkins pipelines for vulnerability testing with Metasploit, Burp Suite, and OWASP ZAP across 25+ firmware releases, saving $180K annually.
● Orchestrated VxRail infrastructure hardening via PowerShell STIG scripts and Active Directory integration across 150+ servers, mentoring 3 junior analysts on secure boot protocols.
● Deployed AI/ML predictive models using Python and Scikit-learn, generating inventory forecasts that improved turnover rates and reduced holding costs by several $1000 monthly.
● Spearheaded incident response and digital forensics using CyberSense ML analytics to investigate 45+ security events in EKS environments, coordinating with SOC teams to maintain near-continuous uptime during patch cycles. TECHNICAL SKILLS
● Cloud Services: AWS (EC2, S3, Lambda, RDS, CloudFormation, EKS)
● CI/CD Tools: Jenkins, GitHub Actions, GitLab CI, AWS CodePipeline
● Automation / IaC: Terraform, Ansible
● Containerization: Docker, Kubernetes (EKS)
● Databases: MySQL, MariaDB, SQL Clustering
● Scripting Languages: Python, Shell, Perl, PowerShell
● Networking / Directory Services: Active Directory, Group Policies
● Cybersecurity: Risk Management, Vulnerability Assessment
● Penetration Testing: Metasploit, Burp Suite, OWASP ZAP
● Incident Response & Forensics: Digital Forensics, Incident Management
● AI/ML: Neural Networks, Search Algorithms, Large Language Models (LLMs), AI-Driven Threat Detection, ML Automation EDUCATION
Bachelor's in Cybersecurity (Expected) University of Maryland Global Campus Maryland Dec 2025 Associate's Degree in Computer Science ITT Technical Institute Kentucky Dec 2014 CERTIFICATIONS
● Cybersecurity Analyst Job Simulation (TATA)
● AWS Solutions Architect Associate (SAA-C02)
● Fiber Optics Association (FOA)