Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Cody Clayton

Miami,FL

Summary

Accomplished DevSecOps and Cybersecurity Engineer with extensive experience in threat and vulnerability management, security automation, and securing cloud-native environments. Proven expertise in designing and implementing security compliance solutions, developing secure DevOps pipelines, and leading cross-functional teams. Specialized in integrating security into DevOps processes and ensuring robust infrastructure security. A strategic thinker and technical leader with a strong capability for analytical reasoning, demonstrated through significant industry achievements and innovative project leadership.

Overview

5
5
years of professional experience
1
1
Certification

Work History

DevSecOps Engineer

Levi, Ray & Shoup
09.2020 - 03.2024
  • Led major projects involving diverse technologies, ensuring secure integration within client environments.
  • Automated compliance control checks for CIS and DISA STIG using Bash and PowerShell scripts, deployed via Tenable, reducing manual compliance efforts by 85%
  • Created comprehensive DevOps pipelines with GitLab, Terraform, Azure, and AWX, automating resource management and implementing security controls.
  • Developed and integrated applications connecting ServiceNow with Active Directory, automating AD account provisioning using Python, reducing provisioning time and improving accuracy
  • Monitored and managed vulnerabilities using industry-standard tools, ensuring system security and integrity.
  • Secured cloud infrastructure with appropriate security setup, policies, and access controls in Azure environments.

Founder & CTO

ChainForce Technologies LLC
11.2021 - 07.2023
  • Designed and implemented cloud environments and DevOps pipelines with Azure Cloud and Azure DevOps for robust infrastructure.
  • Built and enforced network and security practices, ensuring system protection and reliability.
  • Led blockchain development projects, overseeing a team of developers and technical staff.
  • Implemented cloud-native architecture with Kubernetes for efficient application hosting.
  • Directed and mentored a team of developers, fostering a collaborative work environment.
  • Developed and executed the company's technological strategy in alignment with business goals.

DevSecOps Engineer

Beeline
09.2019 - Current
  • Reduced server vulnerabilities by 40% by designing and implementing a comprehensive threat and vulnerability management program using Rapid7 InsightVM, Nessus, and Burp Suite, generating weekly reports for proactive threat management.
  • Enhanced security in DevOps pipelines, integrating measures with Contrast Security and other tools, leading to a 30% reduction in critical application vulnerabilities through collaborative remediation efforts with developers.
  • Improved security posture by ensuring proper setup and access controls in Azure cloud and DevOps environments
  • Deployed and administered IDS/IPS Cylance and InsightIDR solutions, achieving a reduction in endpoint security incidents through prompt response and mitigation.
  • Architected application infrastructure security solutions, focusing on securing Kubernetes environments.
  • Implemented security compliance solutions using CSA Star, CIS Benchmarks, NIST, and ISO 27001 frameworks.

Education

Diploma - CORE Engineering Technical Program

SecureSet Acadmey
Denver, CO
5 2019

Skills

  • IT Delivery Methods: Agile, Waterfall
  • Programming & Scripting: Python, Rust, Shell/Bash, Powershell, JavaScript/TypeScript, NestJS/Express, Solidity
  • CI/CD Tools: Git, Gitlab, Github, Azure Repos, Jenkins
  • Containers & Orchestration: Kubernetes, Docker, OpenShift
  • Infrastructure as Code: Terraform, Azure Resource Manager, Ansible/AWX
  • Cloud Services: Amazon Web Services (AWS), Azure
  • Threat & Vulnerability Management: Rapid7 InsightVM, Nessus, Tenable
  • Application Security Testing: SonarCloud, Contrast Security, BurpSuite
  • Infrastructure Security: IDS/IPS, Cylance, InsightIDR, pfSense, Cloudflare, Azure Security Center, LogRhythm
  • Security & Compliance: CSA Star, CIS Benchmarks, NIST, ISO 27001
  • Application Servers: Apache, NGINX
  • Databases: MySQL, MongoDB
  • API Tools: Insomnia, Postman
  • Project Management Tools: JIRA, Slack, ServiceNow, Microsoft Office Suite

Certification

  • CompTIA Security+
  • AWS Certified Security
  • Azure DevOps Engineer Expert (AZ-400) - Expected 09/2024
  • Azure Administrator Associate (AZ-104)

Timeline

Founder & CTO

ChainForce Technologies LLC
11.2021 - 07.2023

DevSecOps Engineer

Levi, Ray & Shoup
09.2020 - 03.2024

DevSecOps Engineer

Beeline
09.2019 - Current

Diploma - CORE Engineering Technical Program

SecureSet Acadmey
Cody Clayton