Drew Gallis

About Drew Gallis

With the continued shift toward cloud-native infrastructure, visibility, scalability, and automation have become the backbone of modern security operations. I’m currently a Staff Security Observability and Detection Engineering Lead, focused on Security Operations, where I combine full-stack security engineering, detection development, and automation to strengthen detection and response at scale. My work spans diverse environments and distributed systems across multiple regions, bringing together security observability and resilience under one lens.Overall I work with numerous hybrid stacks and services, including- Security-Based Agentic Systems and Natural Language Interfaces (Sub-Agents/MCPs/LLMs)- Kubernetes/Containerized Cloud Services (AWS/AZURE/GCP)- Modern Web Applications (FLASK, REACT, VUE, etc.)- Visualization/Ingestion tools (Elastic Stack, Grafana, Splunk, Sentinel etc.)- Python Security Automation through a mesh of API integrations/middle-waresI currently have industry experience in these security roles- Enterprise Security Incident Response & Remediation- Cloud Platform Security- Kubernetes/Container Security- Vulnerability Review & Remediation for (iOS/Android/Web) applications- Compliance Auditing (for SOC2/CIS/PCI)- Application Security (SAST/SCA/DAST)- Security Awareness Training- Agile Security and Shift-LeftOutside of work I enjoy pushing boundaries in my home lab, exploring hardware hacking projects, experimenting with local agentic systems, MCPs, and LLM-based tooling. I see security as both an engineering discipline and a creative pursuit, focused on building intelligent, reliable systems that make detection sharper, response faster, and operations stronger.In summary, I’ll continue to refine my craft by building and automating security systems that emphasize visibility, reliability, and operational transparency, while driving efficiency and resilience across the stack.

Experience

1. Staff Security Engineer (Observability and Detection Eng Lead)

   Affirm

   Jan 2025 — Present

   Continuing to build and lead our security operations program, with a focus on observability, incident response, data ingestion, analytics, automation, detection engineering, and infrastructure management. Committed to instilling trust with our consumers, merchants, and partners across the globe by maintaining the highest standards of security engineering and reliability.

Education

• Rochester Institute of Technology

  Bachelor of Science (BS), Computing Security

  2016 — 2020

Skills

• Computer Security
• Networking
• Javascript
• Visual Basic
• C#
• Public Speaking
• Html5
• Web Development
• C++
• Microsoft Office
• Research
• Windows
• Java
• Social Media Managment
• Web Design
• Customer Service
• Programming
• Python
• Social Media