Doniel Lovely
Lawrenceville,GA
Summary
Information Security Specialist with passion for aligning security architecture plans and processes with security standards and business goals. Extensive experience developing and testing security frameworks for cloud-based software for Tax Companies. Versed in robust network defense strategies.
Overview
12
12
years of professional experience
1
1
Certification
Work History
Information Security Engineer
Turbo Tax
04.2019 - Current
- Counseled senior-level management on current privacy and security trends and recommendations to mitigate risk.
- Performed risk and vulnerability assessments and provided results and recommendations to senior management.
- Worked with teams to develop company-wide information assurance, security standards and procedures.
- Providing support in responding to prospective client RFPs, assessments and client audits
- Validated and verified system security requirements definitions and analyzed system security designs.
- Developed, implemented, and documented security programs and policies and monitored compliance across departments.
- Maintained strict adherence to regulations such as payment card industry (PCI) data security standard.
- Coordinated with third-party security information and event management (SIEM) providers to maintain protections and predict threats.
IT System Admin-Security
Ateos Systems
04.2016 - 04.2019
- Successfully plan and execute all projects within budgeted cost of $ 6 million and reporting to CISO and C level executives about project status and progress on a biweekly basis
- Used ticketing systems to manage and process support actions and requests.
- Installed and configured operating systems and applications.
- Patched software and installed new versions to eliminate security problems and protect data.
- Translated complex technical issues into digestible language for non-technical users.
- Resolved diverse range of technical issues across multiple systems and applications for customers and end-users across various time zones.
- Removed malware, ransomware, and other threats from laptops and desktop systems.
System Analyst
FEDEX World Headquaters
02.2014 - 03.2016
- Implementation of Netskope Cloud Access Security Broker (CASB) as part of the agency wide data loss prevention program for 12000+ end users.
- Exploit Tool development: Developing the security toolset to exploit discovered CVE vulnerabilities to simulate real-world attacks
- Ensuring compliance to industry best practices such as ISO 27001/27002, relevant data protection laws and regulations
- Participating in the implementation and management of security platforms such as endpoint protection, encryption, SIEM and more.
- Write IDS and signatures based on threat intel feeds to defend against emerging threats.
- Configuration of Web Application Firewall, VPC, Subnets, ELB, Auto Scaling, Security Groups, NACL, AWS Config.
- Log and event forwarding (System logs, AWS Config), aggregation to AlienVault SIEM Platform.
- Designing and configuring the AWS Secure Notification Service (SNS) and Secure Email Service (SES) architecture of the solution and working with clients.
- Created monitors, alarms, and notifications for EC2 hosts using AWSAWS.
- Providing incident response to potentially malicious or anomalous activity based on event data (log files and data outputs) from a wide range of IT systems components, including IDS/IPS, Firewalls, Web Access Security and DLP systems, and other sources.
IT Lead Desktop Specialist
Jabil
05.2012 - 09.2014
- Represented company's technical security interests to partners to provide bi-directional flow of technical information and best practices in information security.
- Provided Tier 1 IT support to non-technical internal users through desk side support services.
- Trained and supported end-users with software, hardware, and network standards and use processes.
- Provided on-call support for critical issues related to Oracle software
- Performed tests of functionality, security, and performance of different workstations and devices.
- Documented support interactions for future reference.
- Worked with software development team on reported errors and bugs on newly released software and assisted in deployment of release fixes.
Education
Bachelor of Science - Computer Networking And Telecommunications
DeVry University
Downers Grove, IL12.2014
Associate of Applied Science - Information Technology
DeVry University
Downers Grove, IL04.2012
Skills
- Vulnerability Assessment and Exploitation
- Social Engineering
- ISO 27001
- DNS
- Firewall
- Social Engineering
- Advanced Persistent Threats
- Cryptography
- IAM
- Penetration testing
- Cloud implementation
- Wireshark software
- Data security
- Endpoint Protection
Certification
- CompTIA Security +
- ITIL V3
- AWS Security Specialty
Timeline
Information Security Engineer
Turbo Tax
04.2019 - Current
IT System Admin-Security
Ateos Systems
04.2016 - 04.2019
System Analyst
FEDEX World Headquaters
02.2014 - 03.2016
IT Lead Desktop Specialist
Jabil
05.2012 - 09.2014
Bachelor of Science - Computer Networking And Telecommunications
DeVry University
Associate of Applied Science - Information Technology
DeVry University