Sean Bonnoitt

About Sean Bonnoitt

Experienced professionial (Google AI, AWS, CEH, Security+ certified) with a demonstrated history of working in the cyber-security, data science, and software engineering fields. Cyber security professional skilled in understand cyber risk and vulnerability data. Two-time Tech X Divisional Award Finalist at Capital One.A graduate of The George Washington University (Master) and The Ohio State University (Bachelor).

Experience

1. Cyber Security Engineer - Manager

   Capital One

   Mar 2022 — Present · Washington, DC, US

   Identified CMDB (configuration management database) tagging issue with co-located assets. Researched the scope of the problem, including collaboration with multiple lines of business teams. • Developed recommended solutions with paths forward. Presented findings directly to leadership. These fixes are providing a benefit by giving affected teams the proper awareness of their findings, previously teams had no knowledge of their vulnerabilities• Acted as primary POC (point of contact) representing remediation management for Vulnerability Escalation Review Committee (VERC). Regularly meet with CTI (Cyber Threat Intelligence) to review the remediation status of many findings and determine if a formal VTF (Vulnerability TaskForce) should be stood up to further analyze the risk a vulnerability brings to the enterprise and if worthy of critical designation• Primary POC for Application Risk Dashboard Improvement Plan. Documented the many features and deficiencies of the ARD based on feedback from the LOBs (lines of business). Presented 15+ specific features and deficiencies directly to ARD project leads, with recommendations for end statesARD has made many updates and improvements based on my specific feedback• Became people manager for Development Program associates. Daily/weekly 1-1 meetings with new associate out of college and plan and assign tasks to new associate as appropriate and able.• Developed training slides for engineers in the LOB explaining the different types of vulnerabilities and AppSec findings. Assisting with teaching engineers to self-service information on basic remediation tasks• Co-lead daily Unknown Assets/ Vuln Office Hours to identify owners of unknown vulnerabilities. Reduced unknown vulnerabilities count to in one weekPerformed interviews with candidates for remediation-related roles for Capital One

Education

• The George Washington University

  Master of Engineering, Cybersecurity Policy and Compliance

  2016 — 2018

• The Ohio State University

  Bachelor of Science, Computer Science and Engineering

  2010 — 2015