Ataou Adoum Hissein
Dublin,OH
Summary
Experienced cybersecurity professional with over five years of combined expertise in cyber security operations and cloud security engineering. Proficient in defining security processes and implementing robust information security programs. Known for maintaining composure in stressful situations and possessing strong interpersonal skills. Skilled in cloud platform and infrastructure security, legal risk and compliance, and cloud data security. Holder of several security and cloud certifications, underscoring a commitment to maintaining the highest standards in information security and cloud computing.
Overview
6
6
years of professional experience
1
1
Certification
Work History
Senior Cloud Security Engineer
JPMC Chase
06.2022 - 10.2024
- Reviewed more than 10 AWS services against internal controls (Archer) and cloud specific controls per year.
- Implemented 15 new detection/preventive controls using WIZ to address gaps identified in service enablement.
- Conducted 60+ Terraform code reviews per month, identifying 20 critical misconfigurations and reducing misconfigurations by 70%.
- Reviewed and enhanced 10+ cloud security controls, reducing security risks by 30%.
- Reviewed existent controls defined for the cloud platform within the organization and provide guidance to enhance controls.
- Perform code review for new IAM changes, SCP, and resources creation, Terraform module often and provided guidance to engineers .
- Perform threat modeling for 5 high-priority applications, identifying 15 potential threats and recommending mitigations.
- Collaborate with internal partners and stakeholders to support business and initiative strategies.
- Train new hires in the team and provide security best practices to developers during code review.
- Integrated automated security testing in 8 CI/CD pipelines, catching 95% of vulnerabilities before production.
Cyber Security Analyst
Huntington Bank
06.2019 - 06.2022
- Performed risk analyses to identify appropriate security countermeasures.
- Improved incident response times by 30% developing and maintaining cybersecurity playbooks for common attack scenarios.
- Performed regular reviews of user access rights, minimizing the risk posed by insider threats or compromised accounts.
- Investigated 40% of malware identified and reported by tooling.
- Worked on various Agile projects to improve CSOC alerts and detections.
- Exhibited teamwork & communication to both assist & gain assistance during investigations & to complete projects.
- Communicated with other teams to resolve alerts created due to internal changes & activity.
Cyber Security Analyst Intern
OHIO DAS
01.2019 - 09.2019
- Identified malware and intrusion issues.
- Conducted initial research based on analytic experience.
- Examined alerts from various security monitoring tools.
- Monitored, investigated, and reported incidents of suspicious activity.
- Identified potential risks, such as virus and malware attacks, and hacking.
- Investigated spam, phishing, suspicious IP, SIEM offense investigations.
- Scanned sites for malware and security risks on a regular basis, DDoS monitoring, Botnet activity, Compromised account and web site monitoring.
Education
Bachelor of Science - Cyber Security
Western Governors University
Columbus, OH09.2021
Associate of Applied Science - Cyber Security
Columbus State Community College
Columbus, OH06.2020
Skills
- Security incident response and threat assessment and Vulnerability Assessment, risk assessment and secure DevOps
- Assess cloud services against control objectives
- Apply security best practices for securing AWS environments, such as setting up security groups, NACLs, and WAF
- Management and monitoring of cloud platforms, supervising the architecting and deployment of applications within AWS platforms
- Patient, diligent, organized, proactive, quality focus and reliable and punctual
- Familiar with ServiceNow, Terraform, Wiz, QRadar, Qualys, Palo alto, Splunk, Windows Defender ATP, Tanium, Office 365 ATP, Skyhigh, Accel OPS, Cisco AMP, Symantec, MCAS, Azure, Autopsy, Phantom, Umbrella, Github, Jira, Confuence, Bitbucket
- Secure VPC environments with security groups, network ACLs, and subnets
- Secure VPC environments with security groups, network ACLs, and subnets
- Implement secure access controls using AWS IAM, service roles, and policies
- Perform infrastructure as code review for AWS resource being provisioned
- Review architecture design and provide feedbacks to reduce risks and threats
- Experience in applying security controls as code to public cloud workloads in Azure and AWS
Certification
- CompTIA - A+, Security+, Network+, Project+, CySA+ Certified
- ISC2 - SSCP certified, CCSP (currently in progress )
- AWS - Cloud Practitioner, Solution Architect Associate, Security Specialty.
Terraform- Solution Associate
Timeline
Senior Cloud Security Engineer
JPMC Chase
06.2022 - 10.2024
Cyber Security Analyst
Huntington Bank
06.2019 - 06.2022
Cyber Security Analyst Intern
OHIO DAS
01.2019 - 09.2019
Bachelor of Science - Cyber Security
Western Governors University
Associate of Applied Science - Cyber Security
Columbus State Community College
Similar Profiles
Kyle BrisendineKyle Brisendine
Senior Operations Manager at JPMC Chase (Mphasis)Senior Operations Manager at JPMC Chase (Mphasis)
Vernisa SekyereVernisa Sekyere
Associate Banker-ME at JPMC, Chase Bank, Bronx New YorkAssociate Banker-ME at JPMC, Chase Bank, Bronx New York
Raga JyotiRaga Jyoti
Information security Analyst at JPMORGAN Chase, JPMCInformation security Analyst at JPMORGAN Chase, JPMC