Luke Shelley

Cloud & Application Security Engineer @Ascendium Education Group

Madison, WI, US

Designed and implemented an application security framework centered on secure release management, establishing standards and an SLA-driven process for remediating, mitigating, or requesting exceptions for code before deployment.• Led the adoption of Infrastructure as Code (IaC) and automated deployments for internal infrastructure and tooling, reducing manual vulnerability remediation efforts, decreasing resource provisioning time, and minimizing reliance on click-ops.• Integrated developer-centric security toolsets into CI/CD pipelines, incorporating third-party scanners to surface actual risk within source code, container images, and external libraries, which prevented vulnerable code from progressing to higher environments.• Spearheaded implementing CIS controls across AWS, Azure, GCP, and enterprise endpoints (macOS/Windows), shrinking attack surfaces and ensuring adherence to compliance standards (NIST SP 800-53 Rev. 5) during annual federal and continuous internal audits.• Balanced secure SDLC ownership with broader security engineering responsibilities, including drafting and maintaining security policies, validating regulatory framework compliance, and securing access controls for a sprawling file-share system.• Implemented DSPM tooling to reduce data loss potential and detect anomalous file share interactions that deviated from baseline user behavior; this included automation scripts that removed insecure sharing links for sensitive files and folders. Additionally, I leveraged a web browser security extension that leveraged a self-hosted system in AWS which sanitized generative AI inputs to prevent PII and business confidential data leakage.

West Florence High School

High School Diploma

Emmaus University

Bachelor's Degree, Computer Information Science