Jacob Steward

About Jacob Steward

I am a Senior Cybersecurity Engineer with extensive experience securing classified systems, enforcing cybersecurity governance, and implementing security controls within the Department of Defense and Intelligence Community. My expertise spans risk assessment, compliance enforcement, continuous monitoring, security automation, and secure system architecture—all critical in protecting mission-critical environments.Key Expertise: Governance & Compliance – NIST Risk Management Framework (RMF), 800-53, Cybersecurity Framework (CSF), FISMA. Proven ability to implement security controls, conduct audits, remediate compliance gaps, and develop System Security Plans (SSPs) and Plans of Action and Milestones (POA & Ms) to obtain/maintain Authorization to Operate (ATO) for classified systems. Risk & Security Assessments – Led security control assessments, vulnerability management, and compliance reviews to mitigate risks for assets valued at $1.2 billion. Strengthened security postures through continuous monitoring, IAM enforcement, and incident response planning. Security Automation & Continuous Monitoring – Integrated Splunk into AWS C2S for real-time log aggregation, threat detection, and risk mitigation. Developed security automation frameworks to enhance incident response and operational efficiency. Threat Detection & Incident Response – Implemented real-time monitoring, automated security scanning, and network traffic analysis using Splunk, Elastic Stack, Nessus, SonarQube, and Wireshark. Cloud Security & DevSecOps – Deployed enterprise-wide SIEM in AWS C2S, integrated Cloud and on-premise Kubernetes environments with Terraform and Ansible, and enforced GitOps CI/CD best practices to automate security and infrastructure. Software & Infrastructure Engineering – Built scalable, secure software solutions from API integrations and full-stack development to automated CI/CD pipelines that reduce toil and human error. Stakeholder Communication & Leadership – Regularly brief senior leadership and technical teams on cybersecurity risk, compliance status, and security control effectiveness. Skilled at bridging technical security measures with policy-driven governance to align cybersecurity strategies with organizational goals.I am passionate about enhancing cybersecurity maturity, automating workflows, and implementing risk-based security strategies to protect critical infrastructure. I am eager to apply my expertise in cybersecurity governance, technical controls, and system integration to support organizational success.

Experience

1. Senior Devops Engineer

   Onebrief

   Apr 2025 — Present

Education

• Galvanize

  Software Engineering Immersive

• Western Governors University

  Master of Science - MS, Cybersecurity and Information Assurance

• Western Governors University

  Bachelor of Science - BS, Cybersecurity and Information Assurance