Ryan Heffernan

About Ryan Heffernan

Ryan Heffernan has worked in tech for 20+ years with the last 15 focused on cybersecurity at Microsoft. He is part of the Azure Security team where he defends data center critical infrastructure. He has contributed to many of Microsoft\'s largest products and most of its security products. He previously taught cybersecurity at the University of Washington and holds an MS in Information Assurance from Norwich University.

Experience

1. Principal Security Engineer

   Microsoft

   Dec 2022 — Present · Redmond, WA, US

   As part of the Secure by Design team under Azure Security, I created and currently lead the design review program for the datacenter critical infrastructure that makes up the most foundational layer of Azure. • This includes industrial control systems (ICS), SCADA, IoT, IIoT, and the IT infrastructure that supports them.• My responsibilities include risk assessments, threat modeling, design and architecture advice, determining and creating requirements, and deciding which security issues are blockers or require an exception.• Led the creation of internal tooling that accelerates the pace of security reviews while simultaneously increasing issues caught.

Education

• University of Utah

  Bachelor of Science (B.S.), Philosophy

  1997 — 2003

• Norwich University

  M.S., Information Assurance, Cum Laude

  2005 — 2007

Skills

• Process Improvement
• Penetration Testing
• Project Management
• Program Management
• IT Operations
• Risk Management
• Network Security
• Information Assurance
• Cloud Computing
• Governance
• Team Leadership
• Sdlc
• Security
• Enterprise Software
• Information Technology
• Vulnerability Assessment
• Disaster Recovery
• Cissp
• Information Security Management
• Management
• Information Security
• Application Security
• Computer Security