Robert Magzanyan

About Robert Magzanyan

Security isn\'t just about defense—it\'s about enabling innovation securely, at scale. With 15+ years in cybersecurity, I bring deep technical expertise and operational leadership to protect complex, high-growth environments while empowering teams to move fast without compromising trust.Currently serving as Manager of Security Engineering, I lead a multidisciplinary team focused on advancing enterprise security posture through modern engineering practices, scalable architecture, and cross-functional alignment. From building forensics and incident response capabilities to driving PCI-DSS 4.0 compliance and Zero Trust transformations, I bridge the gap between technical execution and strategic business impact.I’ve led critical security programs across cloud-native and hybrid infrastructures, implementing guardrails for secure GenAI adoption, reducing vulnerability risk across global environments, and optimizing SOC workflows through automation and data-driven insights. My approach blends systems thinking, empathy-driven leadership, and a passion for solving hard security problems with simplicity and scale in mind.I’m energized by opportunities where security is seen as a business enabler, and where I can grow high-performing teams, partner across functions, and drive meaningful impact.What I bring to the table: Strategic Security Leadership: Aligning security vision with product and business goals Secure Cloud & Endpoint Architecture: Implementing Zero Trust, PAM, EDR, and modern hardening techniques Vulnerability & Risk Reduction at Scale: Driving measurable improvements in patch compliance, CVE response, and infrastructure hygiene Incident Response & Forensics: Deep investigative background supporting root cause, containment, and learning loops AI Governance & Emerging Tech Security: Building secure-by-default policies for GenAI tools in enterprise contexts Security Operations Optimization: Scaling SOC maturity through automation, visibility, and threat intel enrichment Cross-Functional Partnership: Translating security needs into language and outcomes that resonate with engineering, legal, HR, and exec stakeholders Team Building & Coaching: Cultivating resilient, high-trust security teams who take ownership and deliver impactI’m always open to connecting with fellow builders, defenders, and mission-driven teams looking to create safer, more resilient systems.

Experience

1. Manager, Security Engineering

   iHerb

   Aug 2021 — Present

   Led critical initiatives, enhancing cybersecurity, compliance, and operational efficiency across diverse environments. Instrumental in improving patching, streamlining vulnerability remediation, and implementing advanced security controls. Fostered collaboration, negotiated agreements, and developed robust security policies.Major Contributions:Strategic Security Program LeadershipDefined/aligned security goals with enterprise risk management.Chaired Software Review Committee, standardizing application evaluation, cutting shadow IT risk.Developed/refined GenAI Policy (NIST/ISO-based), guiding secure AI adoption, implementing default block policies.Collaborated with HR/Legal to publish Use/InfoSec Policies.Vulnerability Management & Patching ExcellenceConsistently improved Windows/macOS patching compliance.Significantly reduced critical/high vulnerabilities across infrastructure.Led IT Patching Collaboration, achieving high compliance and establishing remediation.Spearheaded PCI 4.0 prep, identifying/initiating compliance projects.Managed internal/external penetration testing, ensuring prompt remediation.Developed/implemented Targeted Risk Assessments for PCI 4.0.Oversaw endpoint security migrations to new management servers.Implemented Application Control/PAM for \'default deny\' posture.Initiated VPN user migration to Zero Trust for enhanced secure access.Implemented network hardening, including VPN restrictions/security benchmarks.Orchestrated SIEM evaluation/renewal, achieving significant log volume reduction via data source optimization.Drove SOC efficiency via professional services, optimizing workflows, enhancing threat intel, automating tasks.Improved email DLP by configuring SOC alerts, testing sensitive data detection.Negotiated multiple security platform renewals, securing over in annual cost reductions while maintaining/expanding license counts.

Education

• California State Polytechnic University-Pomona

  Bachelor of Science, Computer Information Systems

  2011

Skills

• Computer Forensics
• Digital Forensics
• Encase
• Network Forensics
• Cyber-Security
• Computer Security
• Chain of Custody
• Leadership
• Information Assurance
• E-Discovery Consulting
• Information Security
• Incident Response
• Network Security
• Troubleshooting
• Analytical Skills
• Seim
• Intrusion Detection
• Cryptography
• Interpersonal Communication
• System Administration
• Security
• Computer Hardware
• Vmware
• Vpn
• Visio
• Networking
• Active Directory
• Windows Server
• Information Technology
• Mac Os
• Ios
• Disk Encryption
• Internal & External Investigations
• Jira
• Ntfs
• Hfs
• Linux
• Unix
• Wireshark
• Volatility