- Lead, mentor, and grow a team of DevSecOps engineers, conducting regular 1:1s and supporting career development.
- Drive hiring efforts including candidate screening, technical interviews, and onboarding of new team members.
- Define and execute the DevSecOps security strategy and roadmap in alignment with organizational goals.
- Own Purchase Order approvals and budget tracking for security tooling and infrastructure.
- Manage vendor relationships and lead annual and ad-hoc vendor renewals for security platforms.
- Lead the Security Centre of Excellence, establishing standards and championing security across the SDLC.
- Collaborate with executive stakeholders to communicate security posture, risk, and program progress.
- Architect and iterate on CI/CD pipelines using GitHub Actions and Terraform to support secure, automated software delivery.
- Maintain and expand integration of AWS and Azure environments into Microsoft Sentinel for centralized threat detection and monitoring.
- Lead cloud security posture reviews across AWS and Azure, driving remediation of misconfigurations and enforcing least-privilege access.
- Develop and enforce infrastructure as code standards using Terraform and Azure Blueprints for consistent, policy-compliant resource provisioning.
- Integrate and continuously tune SAST/DAST tooling across development pipelines for automated vulnerability detection.
- Conduct threat modeling and risk assessment sessions with engineering and product teams to proactively surface and mitigate security risks.
- Configure and manage AWS security services including SecurityHub, GuardDuty, and CloudTrail for continuous compliance and threat visibility.
- Leverage Microsoft Defender and Sentinel to triage and respond to security incidents across hybrid cloud environments.
- Implement and maintain security automation using Python and Bash to reduce manual toil and accelerate incident response.
- Collaborate with development teams to embed security checkpoints and controls throughout the SDLC.
¶
Profile
Linux Systems / DevSecOps / Information Security / Cloud Security Engineering
About me
Seasoned security engineering leader interested in protecting critical infrastructure and defense systems. Combining deep expertise in threat intelligence, incident response, and security automation with a strong foundation in cloud architecture and DevSecOps. Passionate about implementing robust security frameworks and advancing canadian national security interests through technology. Extensive experience in both offensive and defensive security operations. Current CPTS candidate. Working towards completing my CISSP.
Details
Name:
Colin Tufts
Location:
Remote, Ontario, Canada, Earth
I deployed this resume via Python Flask and Jinja2 framework using Twitter Bootstrap. Deployed in a kubernetes cluster via Gitlab CI/CD.