- Actively monitor and research cyber threats impacting business operations or technology infrastructure
- Handle Incident Management and Incident Response, leading the organization in cyber threat management.
- Conduct Vulnerability Management and Penetration Testing, and ensure compliance with PCI, HIPAA, GDPR, SOC
- Work collaboratively within a team of security professionals across the organization on security best practices and product support
- Collaborate with engineering, infrastructure services, and application development to integrate technology solutions
- Develop subject matter expertise on assigned security technologies for efficient delivery of security services
- Implement custom software solutions using python and applicable scripting languages, including writing scripts in PowerShell/Bash
- Configure, automate and actively monitor threats within AWS using SecurityHub and GuardDuty
- Develop standards in partnership with other teams
- Create, Implement, advance security posture and status via CI/CD pipelines
- Make use of Kali linux and security tools such as Burpsuite, Wireshark to find and test vulnerabilities in our applications
- Make use of the Microsoft Azure suite of tooling, including Microsoft Sentinel, Defender Security Platform, to analyze the environment for threats as well as triage incidents
- Contribute to the Development of Standards, Technical Security Specifications, and Operating Procedures
- Provide support to various IT, IT Security, and Business projects with insights on security technologies
- Manage and configure AWS services, including writing Cloudformation templates
- Work extensively with Windows, Linux infrastructure, and SaaS/PaaS environments in a 24x7 production environment across multiple data centers and Public Cloud providers
¶
Profile
Linux Systems / DevSecOps Engineering / Information Security Engineering
About me
I am a security enthusiast with a passion for automation, CI/CD, DevSecOps, and site reliability. I got my start in the early 2000s, learning pentesting with BackTrack Linux (since renamed Kali). I consider myself experienced with Linux, Networking, AWS, Docker, Kubernetes, Metasploit and all things in between. Current OSCP Candidate.
Details
Name:
Colin Tufts
Location:
Remote, Ontario, Canada, Earth
I deployed this resume via Python Flask and Jinja2 framework using Twitter Bootstrap. Deployed in a kubernetes cluster via Gitlab CI/CD.