Michael Sienko

About Michael Sienko

Senior Cybersecurity Analyst and System Administrator with over 15 years of experience securing, managing, and optimizing enterprise IT environments across healthcare, finance, broadcasting, and technology sectors. Your background spans vulnerability management, secure code remediation, cloud and hybrid infrastructure administration, and large‑scale endpoint security—leveraging tools including Qualys, Snyk, Tanium, Intune, Azure, VMware Horizon, and Microsoft 365.I bring a unique dual‑discipline skill set: deep cybersecurity expertise combined with extensive system administration experience. You have delivered measurable improvements to organizational security posture through enterprise vulnerability reduction programs, secure SDLC collaboration, identity modernization, cloud migrations, VDI deployments, and endpoint management transformations. You’ve supported thousands of endpoints, led migrations from SCCM to Tanium and from VMware Horizon to Azure Entra ID/Autopilot, strengthened AD and IAM environments, and maintained high‑uptime, compliant infrastructures within HIPAA‑regulated and SOX‑governed environments.Recognized for partnering effectively with development, IT, and leadership teams, you build automated, scalable, and secure workflows aligned to business and regulatory goals. Whether driving enterprise patching strategies, supporting audits, remediating code vulnerabilities, enhancing system health monitoring, or designing cloud‑based architectures, you consistently deliver reliability, security, and operational efficiency across complex environments. Beyond your technical achievements, I\'m a dedicated family man with four kids and four dogs—bringing patience, balance, and steady leadership to every team you support.

Experience

1. Software Development Engineer and Security Analyst

   CVS Health

   Sep 2025 — Present · US

   Manage security vulnerabilities by partnering with security and compliance teams to draft findings, develop remediation plans, and secure approvals from technical leads. • Provide guidance to application and project teams to ensure adherence to security controls, Archer standards, and best practices. • Support vendor applications (on prem and hosted), including installation, configuration, and modification of vendor software on Windows servers. • Track and drive remediation plan progress, ensuring alignment with committed deadlines and coordinating recurring check ins with teams. • Complete annual security assessments across the application portfolio. • Participate in SRA reviews, identify gaps, and recommend actionable remediation paths. • Provide security guidance for new and existing vendor hosted application projects. • Interpret and communicate security policies in business friendly terms to improve understanding and adoption. • Partner with software development teams to remediate code vulnerabilities identified through Qualys and Snyk, ensuring adherence to secure coding standards. • Develop vulnerability tracking dashboards and SLA driven reports to give leadership visibility into remediation progress and risk reduction trends. • Collaborate with leadership to align security practices with HIPAA and other regulatory compliance requirements across legal and compliance applications. • Conduct secure code reviews and provide development guidance to enhance product security posture. • Support internal audits and risk assessments to validate security controls, compliance readiness, and documentation accuracy.

Education

• Tarleton State University

  Bachelor of Science (B.S.), CIS

  2002 — 2006

Skills

• Network Administration
• Access
• Troubleshooting
• Databases
• Technical Support
• Google+
• Business Analysis
• Google Docs
• Network Security
• Windows Xp
• Security
• Windows 10
• Cisco Technologies
• Disaster Recovery
• Google Apps
• Windows 7
• Oracle
• Microsoft Sql Server
• Visual Basic
• Sql
• Visio
• Integration
• Linux
• Software Documentation
• Sdlc
• Pvcs
• Active Directory
• Unix
• Xp
• Windows Server
• Sharepoint
• Google Groups
• Software Development Life Cycle (Sdlc)
• Google Drive
• Windows
• Networking
• Computer Hardware