Dan Stynchula

About Dan Stynchula

Hands-on Staff-level Security Engineer with 20+ years designing and implementing enterprise security platforms from greenfield in cloud-native environments.I specialize in Cloud Security Architecture (AWS & GCP), IaC-driven operations, Zero Trust IAM, detection engineering, and building AI/LLM agentic workflows that scale security capabilities without adding headcount.At Infra (Tatari portfolio), I currently serve as Head of Security. I architected and delivered a modern security stack — including Wiz CSPM that maintains zero open high/critical findings with a sustained 24-hour remediation SLA, Okta IAM with fully automated SCIM provisioning across 100+ applications, CrowdStrike EDR + MDM fleet management, and SOC 2 Type 2 compliance achieved in under 12 months. I also built production-grade LLM-powered AppSec pipelines for autonomous PR security reviews and agentic incident response orchestration.Key technical strengths:• Cloud security architecture & IaC (Terraform) across multi-cloud environments• AI/LLM automation — custom MCP servers, Claude-based agentic workflows, and governance frameworks• Zero Trust IAM engineering with functional role abstractions that remain stable through acquisitions• Detection engineering, SIEM correlation, and threat-model-driven response playbooksI enjoy deep technical implementation: writing automation, conducting threat modeling, performing architecture and code reviews, and embedding security directly into developer workflows. Currently exploring Staff and Principal Security Engineer opportunities where I can focus on hands-on architecture and building resilient, scalable security systems at the next level.

Experience

1. Head of Security

   Tatari

   May 2022 — Present · Los Angeles, CA, US

   Architect and own the complete enterprise security platform from greenfield, including Wiz CSPM on AWS/GCP, Okta Zero Trust IAM, CrowdStrike Falcon EDR, Drata compliance automation, Kandji/Intune MDM, and enterprise SIEM• Designed and implemented Wiz CSPM architecture with custom query libraries and automated remediation workflows, achieving and maintaining zero open high/critical cloud findings with a sustained 24-hour remediation SLA• Built and scaled Okta IAM platform integrating 100+ applications with automated SCIM provisioning/de-provisioning tied to Workday HRIS, delivering zero-touch identity lifecycle management and least-privilege enforcement• Engineered functional role-based IAM abstractions decoupled from organizational hierarchies, ensuring access controls remained accurate and self-managing through multiple acquisitions and entity consolidations with zero manual remediation• Developed production LLM-powered AppSec pipelines using autonomous agents for real-time technical specification triage and pull request security reviews, embedding security feedback directly into developer workflows• Designed and implemented agentic LLM incident response orchestration that automatically provisions dedicated war rooms, Slack channels, stakeholder invites, and structured documentation on qualifying triggers• Led SOC 2 Type 2 compliance achievement (unqualified opinion) in 12 months by authoring tailored ISMS policies and implementing automated evidence collection across 100+ controls in Drata• Conducted security due diligence and control harmonization for M&A transactions, assessing cloud environments, identity posture, and toolchain gaps while authoring remediation roadmaps.