Luke Shelley

About Luke Shelley

Cloud Security and Site Reliability Engineer with experience designing, operating, and…

Experience

1. Cloud & Application Security Engineer

   Ascendium Education Group

   Nov 2023 — Present · Madison, WI, US

   Designed and implemented an application security framework centered on secure release management, establishing standards and an SLA-driven process for remediating, mitigating, or requesting exceptions for code before deployment.• Led the adoption of Infrastructure as Code (IaC) and automated deployments for internal infrastructure and tooling, reducing manual vulnerability remediation efforts, decreasing resource provisioning time, and minimizing reliance on click-ops.• Integrated developer-centric security toolsets into CI/CD pipelines, incorporating third-party scanners to surface actual risk within source code, container images, and external libraries, which prevented vulnerable code from progressing to higher environments.• Spearheaded implementing CIS controls across AWS, Azure, GCP, and enterprise endpoints (macOS/Windows), shrinking attack surfaces and ensuring adherence to compliance standards (NIST SP 800-53 Rev. 5) during annual federal and continuous internal audits.• Balanced secure SDLC ownership with broader security engineering responsibilities, including drafting and maintaining security policies, validating regulatory framework compliance, and securing access controls for a sprawling file-share system.• Implemented DSPM tooling to reduce data loss potential and detect anomalous file share interactions that deviated from baseline user behavior; this included automation scripts that removed insecure sharing links for sensitive files and folders. Additionally, I leveraged a web browser security extension that leveraged a self-hosted system in AWS which sanitized generative AI inputs to prevent PII and business confidential data leakage.

Education

• West Florence High School

  High School Diploma

  2006 — 2010

• Emmaus University

  Bachelor's Degree, Computer Information Science

  2010 — 2014

Skills

• Windows
• System Administration
• Tcp/Ip
• Ospf
• Citrix
• Project Management
• Cisco Technologies
• Microsoft Word
• Church History
• IT Service Management
• Active Directory
• Windows Server
• American History
• Microsoft Excel
• Powerpoint
• Eigrp
• Solarwinds
• Project Portfolio Management
• European History
• Virtualbox
• Html
• Team Building
• Avaya Technologies
• Research
• Prosystem Fx Tax
• Hpsm
• Avaya Communication Manager
• Prosystem Fx Engagement
• Military History
• Osi Model
• Frontrange Heat
• Customer Service
• Social Media
• Sharepoint
• Public Speaking