Ashly Garner

About Ashly Garner

Technically-adept and detail-oriented Senior Information Security Engineer with proven track record of leading security projects. In-depth knowledge of endpoint, product, enterprise security, security tools, security policies, authentication and authorization protocols, attack tactics, evasive tactics, preventive and defensive techniques. Highly motivated and passionate communicator skilled at collaborating with cross-functional and diverse team members. Areas of Expertise: Endpoint Security, Cyber Defense, System Administration, Access Control, Incident Response, Vulnerability Management, Data Analysis, Secrets Management, Penetration Testing, Security Awareness, Regulatory Compliance, PKI, WAF’s, Network Monitoring, Security Management, Data Loss Prevention, Threat Intelligence, NIST Controls 800-53 & 800-171, CIS Controls v7.1, ISO 27001, FedRAMP, PCI 4.0 & HIPPA. Platforms & Tools: OpenVAS, Nmap, Antivirus Software, Endpoint Security, Firewall Technologies, GCP, AWS, Active Directory, Authentication Systems, IAM, Log management & Content Filtering, Wireshark, Putty, Python, Jira, Confluence, SharePoint, SQL, GitLab, Windows, TruffleHog, EndorLabs, Bugcrowd, Linux, WIZ, Chronicle SOAR, Rapid7, Thinkst Canary, Legit, SentinelOne, CrowdStrike, Okta, Abnormal, Zscaler, Semgrep, Freshservice, Gitlab. Hardware: Routers, Switches, Servers, Firewalls, Aggregators, IDS, HIDS, SIEM, IPS.

Experience

1. Senior Information Security Engineer

   Redacted

   Nov 2024 — Present

   Implement and maintain security controls across enterprise and production environments, engineering and operating CrowdStrike, SentinelOne, Expel, Wiz, Abnormal, Mimecast, and KnowBe4 while driving centralized EDR and cloud-security policy enforcement. Lead the third-party security and risk management program and internal product security reviews, including network security design reviews (segmentation, VPN/VPC connectivity, zero-trust access), architecture and data-flow analysis, and control validation against SOC 2, ISO 27001, and GDPR. Recommend and implement advanced security measures for system hardening, secure configuration baselines, policy tuning, and automated workflows to strengthen overall security posture and support secure integrations during acquisitions.

Education

• Tulane University School of Professional Advancement

  Certificate

  2020 — 2021

• Southern New Hampshire University

  Bachelor's degree

  2018 — 2020

• Tulane University School of Professional Advancement

  MPS in Cybersecurity Management

  2020 — 2021