Chad Perry

About Chad Perry

Information Security Analyst | Security Engineer | Senior Analyst: CompTIA Linux+ SME, Ansible, Docker, Python I am an accomplished Security and Vulnerability Engineer with hands-on experience protecting global assets, networks, systems, and intellectual property. I demystify incident response and detection to remediate vulnerabilities efficiently through communication, automation, and collaboration. My broad expertise allows me to bridge the gap between engineering and security with an understanding of threat modeling, mitigation techniques, patch management, vulnerability solutions, response coordination, and system management. I think like a hacker to fortify internal defenses against complex threats with a high degree of adaptability. My recent accomplishments include: » Conducted quarterly MSAC reviews for 3.5 years to evaluate 14 points of security without any discrepancies in IAM, vulnerability, patching, and risk assessment. » Developed a web UI interface that includes primary security and compliance controls such as inventory, patching, vulnerabilities, EOL, critical vulnerability patching (Zero Day), and IAM. » Designed and implemented cloud security architecture for Edge Compute, BlueFringe, and Polar projects by automating Twistlock image scanning and artifact collection using Travis CI, IBM Cloud Registry, Docker, and Python programming as the backend. » Automated patching with an Ansible Tower that runs a Nessus scan of 95 servers weekly. » Completed an IBM internal audit for AnT-SRE and presented the current process for IAM, server builds, and vulnerability responses. If you’d like to learn more about InfoSec or want to work together in the future, please contact me using the “Connect” button above or email me at c••••••••@hotmail.com.

Experience

1. Compliance and Security Engineering

   IBM

   Jan 2020 — Present · Cambridge, MA, US

   In this role, I managed and designed the integrated build pipeline using continuous integration workflows. I automated system configurations to protect and defend the network architecture. I also assisted in the development and management of the architecture governance process to ensure technical compliance. Key Achievements: Designed a proof of concept for Travis CI and Keystone Train and deployed both into production. Developed and implemented the CISO directive for Secure Software Development Framework Version 1.1 for BlueFringe, Edge Compute, and Polar. Supported incident response teams to resolve security incidents and vulnerabilities, CVE-20••••66 – Linux Kernel, CVE-20•••••28 - Log4Shell, CVE-20•••••85 – VMware vCenter Server. Keywords: Disaster Recovery · Vulnerability Support & Management · Linux Systems Administration · Risk Mitigation · Automation

Education

• Park University

  Bachelor of Science - BS, Marketing/Marketing Management, 3.75

  2015 — 2019

• New Horizons Learning Center

  Linux Engineering and DevOps

  2011 — 2012

• Park University

  Master's degree (Pending), Management Information Systems and Services, 3.75

  2020 — 2024