Garrett Babinchak
Livonia,MI
Summary
Expert Cybersecurity Engineer and team lead with a proven track record at American Rheinmetall, enhancing security posture through comprehensive cybersecurity defenses, vulnerability assessments and compliance management. Adept in cybersecurity solutions, firewall management, endpoint control, and incident response, fostering a culture of security awareness while demonstrating critical thinking and leadership in driving successful security initiatives.
Our team successfully achieved a perfect certification score for the CMMC 2.0 level 2 assessment. Gaining the certification for American Rheinmetall, while going through a corporate merger.
Overview
2027
2027
years of professional experience
Work History
Cybersecurity Engineer/Managing Director
American Rheinmetall
03.2022 - Current
- Crafted security policies and procedures that became backbone of Rheinmetall's cybersecurity framework.
- Empowered decision-making with creation of comprehensive security reports, risk/vulnerability assessments and key performance indicators.
- Created customized security awareness training materials tailored to various departments within the organization and executed phishing campaigns to train employees.
- Optimized firewall configurations to provide maximum protection without inhibiting productivity or performance. Including unified threat management policies, deep packet inspection, encryption certificates/Public key infrastructure, virtual local area networks, virtual private networks (SSL/TLS/IPSEC/Wireguard), stateful packet filtering, intrusion detection and prevention, dynamic routing, network addressing, multifactor authentication, network access control, data loss prevention, web filtering, and antimalware.
- Drove adoption of security information and event management (SIEM) systems for real-time security monitoring using FortiSIEM and Fortianalyzer.
- Enhanced security posture by implementing comprehensive vulnerability assessments and remediation strategies using Tenable Nessus.
- Ensured secure remote work environments by implementing robust VPN technologies and policies.
- Maintained up-to-date knowledge of industry trends and threat landscape through ongoing research and professional development activities.
- Conducted regular audits of IT infrastructure to ensure adherence to established cybersecurity policies and best practices.
- Optimized cybersecurity protocols, ensuring compliance with national and international security standards. Constant network protection using NGAV, EDR, XDR, application control, layer 7 firewalling, data loss prevention, log collection, multifactor authentication, encryption (bitlocker), certificates, identity and access management, single sign on, endpoint control, web filtering, and network access control policies.
- Successfully achieved government and regulatory compliance requirements. Rheinmetall received 100% on the CMMC level 2 assessment, passing with flying colors. Also implemented compliance requirements for PCI-DSS, HIPAA, PII, NIST, ITAR, and ISO.
- Identified and mitigated potential threats by analyzing network traffic and user behavior.
- Collaborated with IT teams to integrate cybersecurity measures into development lifecycle of software and applications.
- Fostered culture of security awareness, conducting regular training sessions for staff on cybersecurity best practices. Trained and mentored junior staff.
- Improved system resilience with development and execution of disaster recovery plans.
- Conducted regular penetration testing for identifying system vulnerabilities, leading to strengthened defense mechanisms.
- Managed company Bring Your Own Device program, onboarding employee devices and verifying absence of inherent security threats.
- Applied Center for Internet Security (CIS) benchmarks to verify performance of ongoing security measures.
- Performed network troubleshooting to isolate and diagnose common problems.
- Worked with business partners to balance requirements, budget, security, and risk reduction.
- Designed, installed and configured email encryption gateways with data loss prevention.
- Liaised with third parties to respond to security events and understand threat landscape.
- Directed large-scale projects from inception to completion on time/budget with strict adherence to quality standards.
- Developed comprehensive business plans, outlining long-term goals and actionable steps toward success.
- Oversaw complex negotiations with suppliers/vendors for favorable contract terms that led to cost savings.
Network Engineer Administrator
Infoview Systems
03.2016 - 10.2020
- MSP providing support to over 100 business across Metro Detroit.
- Developed detailed documentation for network architecture, policies, and procedures to maintain consistency across the organization.
- Ensured seamless integration of new technologies into existing infrastructures through careful planning and execution. Minimal downtime always being the goal.
- Implemented disaster recovery plans, safeguarding critical data in case of unforeseen events or failures. Maximizing systems uptime.
- Maintained a high level of expertise in networking technologies through continuous professional development initiatives.
- Managed vendor/client relationships, evaluating products and services to ensure optimal performance and costeffectiveness.
- Conducted thorough assessments of existing networks, identifying areas for improvement and making recommendations accordingly.
- Performed troubleshooting for Juniper, Cisco, Watchguard, Fortinet, Pfsense/Opensense, Barracuda, Sophos, Sonicwall, and Palo Alto.
- Provided network support services for devices such as routers, switches, wireless access points, firewalls, load/link balancers, modems, controllers, email, voip, and other hardware.
- Provided complete end-to-end engineering and installation of route-based IP network solutions. Static routing or dynamic routing protocols such as BGP and OSPF.
- Monitored network capacity and performance to diagnose and resolve complex network problems.
- Public and private DNS management.
- Domain management including websites and website security.
- Full management of windows servers and endpoints.
- Active directory/LDAP management.
- Linux systems administration.
- Troubleshot complex multi-vendor network service provider issues.
- Created VPN infrastructure and allowed for secure remote connections leveraging certificates, LDAP integration, and MFA.
- Resolved issues and escalated problems with knowledgeable support and quality service in a timely maner.
- Installed and configured network printers and other peripheral devices.
- Designed and evaluated WAN and LAN connectivity technologies.
- Installed and maintained VOIP phone & fax systems.
- Implemented security camera and access control systems.
- Architected entire customer solutions to maximize efficiency and minimize cost.
- Analyzed complex project server issues and worked on large enterprise and business-critical applications.
Information Technology Administrator
Multiple
- I have worked in various industries throughout college gaining valuable industry insights, skills, and experneces at Kar's Nuts/Second Nature foods , Gold Star Mortgage, and the City of Novi.
- I also operate my own side-business providing quality IT solutions to local businesses outside of normal working hours.
Education
Computer And Information Sciences
University of Michigan
Dearborn, MINovi High School
Novi, MISkills
- Vulnerability assessment
- Social engineering defense
- Virtualization security
- DNS and Domain management
- VOIP systems
- Email and email security systems
- Access control and Camera systems
- Operating system security
- Two-factor authentication
- Access control
- Firewall management
- Data loss prevention
- DDoS prevention
- Security policy development
- Public key infrastructure
- Security auditing
- Security information and event management
- Security architecture
- Security awareness training
- Incident response
- Patch management
- Compliance management
- Cryptography
- Penetration testing
- Encryption technologies
- Identity management
- Network security
- Application security
- Database security
- Intrusion detection
- Wireless security
- Web application security
- Digital forensics
- IoT security
- OT/SCADA security
- Mobile security
- Endpoint protection
- Disaster recovery planning
- Malware analysis
- Machine learning security
- Emerging AI threats and security
- Cloud security
- Zero trust architecture
- IP addressing and subnetting
- Teamwork and collaboration
- Critical thinking
- Continuous improvement
Timeline
Cybersecurity Engineer/Managing Director
American Rheinmetall
03.2022 - Current
Network Engineer Administrator
Infoview Systems
03.2016 - 10.2020
Information Technology Administrator
Multiple
Computer And Information Sciences
University of Michigan
Novi High School