Phillip Kelly

About Phillip Kelly

Results-driven cybersecurity professional who\'s passionate about building resilient, secure systems – especially leveraging the power of AI to enhance threat detection and incident response.Successfully leading complex security initiatives, I\'ve implemented robust cloud security controls in Azure and GCP and am currently working towards achieving ISO 27001 compliance for my organization. Proficient in penetration testing, vulnerability management, and love using tools like Splunk, CrowdStrike Falcon, and Metasploit to outsmart the bad guys. My experience also includes aligning security strategies with frameworks like NIST CSF, CIS Controls, and GRC.Always learning and exploring new ways to improve security posture, particularly through AI-driven solutions. Let\'s connect and discuss how my skills can benefit your organization!#cybersecurity #cloudsecurity #infosec #securityengineer #penetrationtesting #GRC #incidentresponse #artificialintelligence #AI

Experience

1. Cybersecurity Engineer

   Numeracle

   Jun 2022 — Present · Chesapeake, VA, US

   Driving the strategic implementation of the ISO 27001 certification program, while simultaneously enhancing CIS Controls maturity by 35% through automation and process optimization, resulting in a significant reduction in audit findings and a demonstrable increase in client trust Proactively identifying and remediating critical vulnerabilities (OWASP Top 10) in internal applications, preventing potential breaches from impacting customer records and incurring regulatory fines and reputational damage Led the migration of our security infrastructure to Microsoft Azure, leveraging Azure Security Center and Microsoft Sentinel to implement robust security controls, resulting in a 50% reduction in incident response time and a 25% improvement in overall security posture visibility Developing and delivering cybersecurity awareness training, reducing phishing susceptibility by 60% in six months and fostering a culture of security across the organization Managing relationships with leading cybersecurity firms (CrowdStrike, Palo Alto), overseeing and conducting penetration testing and vulnerability assessments, achieving 99% remediation of high-risk findings within SLAs Contributing to the development of the organization\'s cyber risk quantification framework, enabling the C-suite to make data-driven decisions on cybersecurity investments, resulting in a 20% improvement in risk mitigation ROI

Education

• Western Governors University

  Bachelor of Science

  2023 — 2024