Bertrand Banla

About Bertrand Banla

Passionate Cloud Security Engineer with 10+ Years of total IT experience in support, administration, analysis, design and maintenance of client/server and web applications, investigating and preventing network, host, and email-based attacks. Performs malware analysis, incident response, data loss prevention, Analysis Tools, Log Aggregation Tools observing Security Solutions; SIEMS, Firewall Appliances, Intrusion Prevention Systems and improving SOC processes by utilizing top industry security solutions. Experienced in providing real-time guidance to clients on Network Configuration, Security settings and attack mitigation procedures. ·

Experience

1. Cloud Security Engineer

   Cisco

   Jun 2021 — Present

   Responsible for identifying security risks and exposures, and determine the causes of security violations• Employ IAM to create & control AWS users & groups to AWS services and resources. Enforce MFA set up for all users created• Create and modify Security Groups ensuring ports are not open to the internet without business justifications• Create NAT gateways and instances to allow communication from Instances in private subnets to the Internet• Intergrated Splunk with Jira and all supported AWS Accounts to generate Alerts and create tickets when Security groups are open to the internet, when users successfully login without MFA, CloudTrail logging Disabled/Deleted, VPC created/deleted in Production Accounts, IAM Role credential exfiltrated from EC2 metadata etc etc.• Assist with Implementation of Cloud monitoring tools such as Cloudwatch metrics, Dashboards and Alarms to enable detailed monitoring of AWS Resources.• Research attempted or successful efforts to compromise systems security and design countermeasures.• Gather and Analyze logs from SEIM tools to recreate incidents and hunt for threats.• Respond to raised events to develop and execute security controls, implement countermeasures to prevent attacks or attempts to infiltrate company email, data, e-commerce, and web-based systems.• Work with security operations team to ensure that security requirements are considered and complied with, implementing security tools such as Guard Duty, Trusted Advisor, Amazon Inspector, AWS Config, Security Hub, AWS WAF & Shield, Cloudtrail.• Work with Incident Response Team to quickly identify attacks, minimize effects, contain damages, and remediate the cause to reduce future risk• Strong exposure to Devops and Agile tools such as Jenkins, Git, Maven, Bitbucket/Github, GitGuardian, Ansible, SonarQube, Terraform, Nexus, Docker, Kubernetes, Jira, Confluence, PagerDuty

Education

• The University of Texas at Austin

  Postgraduate Degree, Cloud Computing

  2021 — 2022

• University of North Texas

  Bachelor’s Degree, Information Systems and Digital Content

  2014