Cybersecurity Analyst - Secure SaaS Builder

# Michael Sanders

Franklin, NC *****

Phone: 704-***-****

Email: *.*.***********@*****.***

LinkedIn: linkedin.com/in/yourprofile

Country: United States

## Professional Summary

Cybersecurity-focused software founder and fast learner with hands-on experience building a cloud-native, multi-tenant compliance SaaS platform. Experienced in secure software development, role-based access control, end-to-end encryption, vulnerability management, CI/CD security, SAST/DAST testing, incident response planning, and SOC 2-ready compliance controls. Detail-oriented, disciplined, and results-driven, with strong analytical thinking and a practical understanding of how to harden systems, reduce risk, and support security operations. Seeking a Cybersecurity Analyst role where secure development, operational security, monitoring, compliance, and threat prevention skills can be applied to protect business systems and data.

## Target Role

Cybersecurity Analyst

## Core Skills

- Cybersecurity Analysis

- Security Operations

- Vulnerability Management

- Risk Assessment

- Incident Response

- Threat Monitoring

- Secure Software Development

- Cloud Security

- SaaS Security

- Compliance Automation

- SOC 2 Readiness

- Access Control

- Role-Based Access Control

- RBAC Implementation

- End-to-End Encryption

- Data Protection

- Security Documentation

- Security Policy Development

- SAST and DAST

- CI/CD Security

- Application Security

- Web Application Security

- Multi-Tenant SaaS Architecture

- Security Controls

- Audit Preparation

- Critical Thinking

- Technical Troubleshooting

- Process Improvement

- Customer Onboarding

- Remote Collaboration

## Technical Skills

**Security Tools & Practices:**

SAST, DAST, vulnerability scanning, incident response playbooks, secure SDLC, access control reviews, encryption practices, security documentation, compliance controls

**Cloud & SaaS Security:**

Cloud-native application security, multi-tenant SaaS environments, customer data protection, secure authentication, RBAC, audit-ready workflows

**Development & Operations:**

CI/CD pipelines, application deployment, software testing, secure coding practices, issue tracking, documentation, version control concepts

**Compliance & Risk:**

SOC 2 readiness, security control implementation, policy documentation, audit support, risk reduction, compliance process automation

## Professional Experience

### Software Founder / Security-Focused SaaS Builder

**Independent Project — Cloud-Native Compliance SaaS**

Franklin, NC / Remote

2024 – Present

- Built and managed a cloud-native, multi-tenant compliance SaaS platform designed to help organizations streamline compliance workflows and reduce manual processing.

- Implemented role-based access control to ensure users only had access to appropriate system functions and sensitive information.

- Applied end-to-end encryption concepts to protect customer data and improve overall platform security posture.

- Integrated CI/CD security practices, including static application security testing and dynamic application security testing workflows.

- Developed vulnerability management processes to identify, track, prioritize, and remediate application security issues.

- Created incident response playbooks to support faster response to security events, operational disruptions, and potential data protection concerns.

- Designed SOC 2-ready security controls and documentation to support customer trust, audit readiness, and compliance alignment.

- Reduced manual compliance processing by approximately 50% through automation and improved workflow design.

- Onboarded 3 pilot customers while maintaining focus on secure access, data protection, and operational reliability.

- Built strong practical experience in secure development, technical troubleshooting, cloud security concepts, and compliance-driven product design.

### Security & Technology Learner / Cybersecurity Career Development

**Self-Directed Training and Hands-On Practice**

Remote

2023 – Present

- Developed practical cybersecurity knowledge through hands-on software building, security research, and technical problem solving.

- Studied cybersecurity fundamentals including network security, access control, risk management, vulnerability management, data protection, and incident response.

- Practiced identifying security risks in software workflows and applying secure design principles to reduce exposure.

- Built discipline in documenting processes, following structured procedures, and improving systems based on testing and feedback.

- Strengthened analytical and critical thinking skills through independent technical projects and security-focused application development.

- Maintained active interest in technology, computer software building, cybersecurity operations, and continuous learning.

## Projects

### Multi-Tenant Compliance SaaS Platform

- Designed a SaaS platform focused on compliance process automation and secure customer data handling.

- Built security-focused features including RBAC, encryption concepts, vulnerability tracking, and audit-oriented controls.

- Created workflows that helped reduce manual compliance work by approximately 50%.

- Supported onboarding for 3 pilot customers.

- Developed SOC 2-ready controls and internal documentation for improved audit preparation and trust-building.

### Incident Response Playbook Development

- Created structured incident response playbooks for identifying, escalating, documenting, and resolving potential security events.

- Included steps for detection, containment, investigation, remediation, communication, and post-incident review.

- Focused on creating repeatable processes that could support small business and SaaS security operations.

### Secure CI/CD Workflow

- Implemented security review concepts into CI/CD workflows.

- Added SAST and DAST testing concepts to help identify application weaknesses earlier in the development lifecycle.

- Focused on improving secure development practices and reducing vulnerabilities before release.

## Certifications

Cybersecurity certifications in progress or recommended for target role:

- CompTIA Security+ — In Progress / Recommended

- Google Cybersecurity Professional Certificate — Recommended

- ISC2 Certified in Cybersecurity — Recommended

## Education

Cybersecurity and Software Development Training

Self-Directed Technical Study

2023 – Present

Relevant focus areas: cybersecurity fundamentals, secure software development, vulnerability management, incident response, cloud security, compliance, data protection, SaaS security, and security operations.

## Additional Information

- Interested in cybersecurity, computer software building, technical problem solving, racing, and travel.

- Strong motivation to grow into a professional cybersecurity role.

- Comfortable learning new systems, following strict procedures, and working in remote environments.

- Detail-oriented and dependable with a strong interest in protecting systems, data, and users.

Dear Hiring Manager,

I am excited to apply for the Cybersecurity Analyst position with Evolve Systems. My background combines hands-on secure software development, compliance-focused SaaS building, vulnerability management, and a strong commitment to learning and applying cybersecurity best practices. I am especially interested in opportunities where I can help monitor systems, protect sensitive data, support compliance, and contribute to a disciplined security program.

As the founder and builder of a cloud-native, multi-tenant compliance SaaS platform, I implemented practical security controls including role-based access control, end-to-end encryption concepts, CI/CD security workflows, SAST/DAST testing, vulnerability management processes, and incident response playbooks. This work helped reduce manual compliance processing by approximately 50% and supported onboarding for 3 pilot customers with SOC 2-ready controls. These experiences gave me a strong foundation in secure development, risk reduction, documentation, and operational security.

I bring strong analytical thinking, attention to detail, and the ability to follow strict protocols and security procedures. I am a quick learner with a genuine interest in technology, networks, data protection, and cybersecurity operations. I am confident that my practical project experience, disciplined work style, and commitment to continuous improvement would allow me to contribute value to your team.

Thank you for considering my application. I would welcome the opportunity to discuss how my background, technical skills, and motivation can support Evolve Systems’ cybersecurity goals.

Warm regards,

Michael Sanders

Contact this candidate