Marquaze Carr

Cyber Security Engineer @Asm Research

Serves as a key member of the Operational Security, Risk, and Compliance team, translating enterprise security policy into daily practice, automating compliance workflows, and acting as the liaison for internal/external audits. Drive continuous risk monitoring, incident response, and staff security awareness to safeguard critical assets and ensure regulatory adherence.• Designed and deployed automated compliance workflows, cutting manual audit-prep effort by XX % and accelerating evidence gathering.• Led end-to-end risk assessments across infrastructure and SaaS environments; defined mitigation plans that reduced high-severity findings by XX %.• Authored and maintained a full security policy suite (access control, data handling, incident response), aligning with NIST 800-53 and ISO 27001.• Represented OSRC during SOC 2 and PCI-DSS audits; compiled artifacts, addressed findings, and drove remediation to closure.• Configured and administered firewalls, web proxies, EDR, and DLP solutions; tuned alerting to cut false positives and improve MTTR.• Correlated Splunk, EDR, and DLP data to detect anomalies; escalated and contained potential data-loss events within SLA.• Maintained live compliance dashboards and KPI reports for executives, providing real-time visibility into control effectiveness.• Delivered quarterly security-awareness training to 100 + operational staff, driving a measurable drop in policy violations.• Performed day-to-day OSRC platform maintenance (updates, backups, license management) to ensure high availability and integrity.• Contributed to the incident-response team, assisting with containment, forensics, and post-incident reviews to strengthen future defenses.