Matthew Bardeleben
Senior Information Security Engineer @Duluth Trading Company
Signup · Get unlimited contacts
WORK HISTORY
Senior Information Security Engineer @Duluth Trading Company
Mount Horeb, WI, US
Reduced SOC average response time by 46% and improved alert resolution speed by 50% through workflow optimization- Maintained zero security incidents during holiday peak season (Nov–Jan) across a employee retail environment; team achieved \"Exceptional\" incident response rating averaging 11.8 minutes on major problem records- Discovered and enforced conditional access policies in read-only mode, closing a significant authentication enforcement gap across all users and privileged accounts- Lead Azure SSO lifecycle management: deployed 15 new enterprise application integrations, decommissioned ~10 legacy apps, and performed access audits reducing unnecessary account sprawl- Audited SSL infrastructure, eliminating 13 redundant certificates and securing $3,200 in annual cost avoidance; led wildcard-to-dedicated cert migration eliminating single points of failure- Hardened AD Group Policy and Google Workspace against CIS benchmarks; improved endpoint compliance score from 12% to 27%- Coordinated fraud incident response recovering $25,925 across 19 transactions; authored company-wide social engineering policy deployed to 60+ retail locations- Own Security Awareness Training program via Mimecast: design phishing simulations, curate training modules, schedule campaigns, and review results- Authored 30+ net-new InfoSec SOPs, building the department\'s documentation library largely from scratch- Manage all SSL and SAML certificate lifecycle, SSO application administration, and third-party vendor security reviews jointly with security leadership- Proactively identified critical Notepad++ CVE prevalent across the environment; coordinated full remediation with endpoint team- Coordinate annual third-party penetration testing; review findings and translate results for leadership- Drove Windows 10 → Windows 11 migration to completion across endpoints, a project initiated and owned through promotion from endpoint to security
EDUCATION
Eastern Michigan University
Bachelor of Science - BS, History
SKILLS
ABOUT MATTHEW BARDELEBEN
A Senior Information Security Engineer with a 15-year leadership background and a purpose-built pivot into security gives me a perspective most engineers don\'t have: I understand how security decisions impact business operations and I know how to communicate risk to the people who make them.At Duluth Trading Company, I serve as Senior Security Engineer responsible for IAM, SOC operations, endpoint security, and infrastructure hardening across a employee retail environment. Recent results include a 46% reduction in SOC response time, zero security incidents during peak holiday season,$3,200 in annual cost avoidance through certificate infrastructure consolidation, and $25,925 recovered during a coordinated fraud incident. I also drove the organization\'s Windows 10 to Windows 11 migration across endpoints — a project I initiated as the lead endpoint engineer and completed after being promoted mid-execution to security.Earlier, at Cubii, I built the company\'s Information Security program from the ground up as the sole security resource — achieving PCI, GDPR, and CCPA compliance, reducing endpoint vulnerability risk scores from to under in under 12 months, and eliminating all 14 critical findings from annual third-party security assessments. At the Wisconsin Foundation and Alumni Association, I deployed Qualys VMDR from scratch and remediated 21,500+ vulnerabilities in under 5 months, improving CIS benchmark compliance from 37% to 92%.Beyond execution, I consistently operate at a lead level — building processes, writing documentation, coaching peers, and driving cross-functional initiatives that outlast the projects that created them. My background leading teams of up to 125 people in high-pressure operational environments gives me a communication and leadership foundation most security engineers don\'t have.I\'m actively preparing for the intersection of security and AI. I run a home lab environment that includes a self-hosted Wazuh SIEM and an Ollama + Open WebUI stack for hands-on AI experimentation. I believe securing agentic AI infrastructure is one of the most important problems the field will face in the next five years, and I intend to be ready for it.Certifications: ISC2 CC, Microsoft Azure AZ-900, Qualys VMDR & Patch Management. Currently pursuing Google Generative AI Leader (GAIL) certification.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.