Jonathan S.

I'm a hands-on security engineer who closes risk instead of just reporting it. Over 13 years I've worked in vulnerability management, cloud security, penetration testing, DevSecOps, and compliance. That includes roles as Project Manager and Vulnerability Analyst SME at Bank of America, Senior Information Security Analyst at Celanese, Cyber Security Domain Coach at Nissan Financial, and Penetration Testing & DevSecOps Engineer at Ironwood Cyber, work with Alphabet/Google, and 34 completed jobs on Upwork. What I do: - Risk-based vulnerability and exposure management, prioritizing by exploitability (CISA KEV and EPSS) and business impact. - Cloud security posture management and hardening across AWS, Azure, and GCP. - Security gates in CI/CD pipelines and infrastructure as code (Terraform). - SIEM and detection (Splunk, QRadar), plus incident investigation. - Compliance readiness for NIST, ISO 27001, PCI-DSS, HIPAA, and GDPR. Available for contract, fractional, and project-based work in US time zones.