Aaron A.

About Aaron A.

I specialize in evaluating and securing application and system architectures across on-prem, hybrid, and cloud environments. My work focuses on identifying design risks early, aligning architectures with organizational security controls, and ensuring compliance with industry frameworks such as NIST, CIS, CSA, and OWASP. I partner with engineering and cloud teams to drive secure-by-design principles and strengthen overall security posture.

Experience

1. Principal Cyber Security Architect

   Exelon

   Feb 2020 — Present

   Annually review security control documents and update the controls based on an ever-evolving security landscape.Review guidelines and frameworks from well-known institutions and foundations such as NIST, CIS, and OWASP.Review corporate and business applications architectures to ensure they are adhering to company stated security controls as well as industry best practices. These applications may be internally developed or procured from 3rd party vendors and exist on-premises, hybrid, or cloud native.Participated in RFP/RFIs to analyze the security controls of potential vendor products and score them appropriately.Provided assistance in creating security questionaries that are sent to 3rd party vendors and internal business application owners to effectively analyze their security controls.Contributed to the development of a framework for enterprise DevOps security controls that will ensure the security and integrity of Exelon’s application code base.

Skills

• Blackberry Enterprise Server
• Scripting
• Networking
• Vbscript
• Microsoft Exchange
• Messaging
• Lync Server 2010
• System Deployment
• Active Directory
• C#
• Ocs 2007
• Citrix
• Powershell
• Disaster Recovery
• Office 365