Lola O

About Lola O

Experienced Cloud Engineer with a strong track record of building and scaling secure…

Experience

1. Cloud Security Engineer

   CIBC US

   Apr 2022 — Present · US

   Designed and implemented multi-cloud security architectures across AWS, Azure, and GCP aligned with NIST CSF, ISO 27001, and SOC 2 frameworks-Deployed and configured CSPM solutions (CrowdStrike, Prisma Cloud, Microsoft Defender for Cloud) to continuously detect and remediate misconfigurations-Automated security baselines and compliance checks using Terraform, AWS Config, and Azure Policy to enforce CIS Benchmarks-Integrated vulnerability scanning tools (Nessus, Trivy, OpenVAS, Snyk) into CI/CD pipelines to identify and remediate code and container vulnerabilities pre-deployment-Managed IAM and least privilege enforcement, implementing SCPs, conditional access, and role-based policies across cloud tenants-Developed automated guardrails for S3 bucket encryption, EBS snapshot compliance, and public access restrictions using Lambda and EventBridge-Implemented centralized logging and SIEM integrations with CloudTrail, Security Hub, Azure Sentinel, and Splunk to enhance threat visibility-Built threat detection workflows using GuardDuty, Detective, and Defender for Cloud to identify indicators of attack (IOA) and indicators of compromise (IOC)-Collaborated with DevOps teams to embed security controls in IaC templates and pipelines, achieving “shift-left” security adoption-Performed incident triage and response using AWS CloudWatch Alerts, Azure Monitor, and PagerDuty integrations for faster containment-Supported SOC 2, HIPAA, and PCI DSS audit evidence collection, mapping cloud configurations to control objectives.