Ryan Roseboom

Principal Cyber Security Engineer

Ryan@RyanRoseboom.com
https://resume.ryanroseboom.com

Summary

A renaissance man of cyber security with in-depth knowledge and experience in enterprise infrastructure, development, and security architecture. A self-directed individual who possesses a rare combination of in-depth and broad technical skill as well as security design knowledge incorporating business continuity. Proficient in Windows and Linux and in providing secure highly available systems. Experienced in working in and maintaining PCI DSS compliance as well as SOX compliance. Well versed in threat and vulnerablity management with experience in penetration testing, security control audits, reverse engineering, risk analysis, and programing and scripting in a variety of languages.

Certifications

OSCP

Offensive Security Certified Professional

CISSP

Certified Information Systems Security Professional

CISSP-ISSAP

CISSP - Information Systems Security Architecture Professional

CEH

Certified Ethical Hack

MCP

Microsoft Certified Professional

Experience

The ODP Corporation

June 2021 - Present

Principal Cyber Security Engineer

Report to and advise CISO on insights about security threats, provide strategic security plans, recommendations on prevailing industry developments, and collaborate in any role needed to enhance the overall security posture of the organization.

Lead automation efforts in the Information Security department as well as the organization.

Orchestrate migration of Splunk from on-premises to Azure cloud and implement a git based pipelined CI/CD process for the managed of Splunk infrustructure and services and configuration of the environment.

Provide security roadmaps for the enterprise.

Pioneered GitHub Actions within CI/CD pipelines for the organization to accelerate, secure, and streamline management and deployments.

Create and maintain security policies, standards, and guidelines adopted by the enterprise.

Create security CI/CD pipelines to manage Azure cloud infrastructure.

Provide security and best practice guidance for implementing new services in Azure.

Act as a technical leader in the IT community, helping to lay out the roadmap and adoption of new tools, technologies, and processes.

Regularly perform threat hunting within the environment, finding security issues in misconfiguration, insecure designs, vulnerable software, and areas lacking best practices.

Work with risk owners to communicate and document security risks/severity to the organization; work with relevant teams to create remediation plans and/or steps to reduce risk to the organization.

Perform security reviews and threat modeling on major applications and changes to the environment to ensure implementation of best practices and security standards.

Created offline AI chat solution with an Information Security knowledge base and large language model to provide a secure way to obtain answers to Information Security questions.

Office Depot, Inc.

March 2017 - June 2021

Consultant Cyber Security Engineer

Reported into and advised CISO on security threats, provided security roadmaps, guidance on industry trends, and worked in any capacity necessary to improve the security posture of the enterprise.

Automated the vulnerability management and reporting process, which notified systems owners of vulnerabilities and provided reporting, trending, and metrics to management.

Created a Qualys self-service vulnerability scan portal to allow system owners the ability to discover vulnerabilities on their systems outside monthly reporting.

Created several processes to collected specific data elements out of security systems such as Tripwire and Qualys (e.g., insecure TLS versions, insecure ports, and expiring certificates) to provide enriched data in Splunk to corollate ownership, trends, and metrics to better remediate large scale security opportunities.

Created an automated process to provide management with an overview and metrics on patching across all IT towers and subsidiaries.

Investigated, tested, and created threat models for new and existing systems, applications and networks for security vulnerabilities, misconfigurations, and setups not aligned with best practices and security standards.

Built a Splunk Enterprise environment and implemented Splunk Enterprise Security. Built and configured SIEM within the Splunk environment and onboarded a new SOC team.

Was the manager of the Splunk Operations team.

Developed, wrote, and created 70+ custom input processes, programs, services\daemons, and scripts using a mix of C# and Python to onboard data from various log sources into Splunk.

Created a process to make an environmental snapshot in Splunk. This creates a running history of all users accounts and systems in the environment with pertinent metadata on each object as well as their compliance states in various security tools, security systems, operational status, and patching levels while using a minimal amount of Splunk storage.

Created dashboards to provide management with a complete security overview of the environment from one place.

Created security designs for buildout of a new Azure environment to replace the legacy datacenter.

Acted as technical advisor and security expert to the Information Security department.

Created a zero-knowledge password audit process to ensure weak or compromised Active Directory passwords were not used.

Office Depot, Inc.

February 2015 - March 2017

Lead Security Architect

Reported into CISO. Enterprise security architect responsible for assessing enterprise projects' security posture.

Performed vendor risk assessments on all vendors used by Office Depot.

Lead technical resource on incident response team.

Performed incident investigations on malicious or suspicious stagers/payloads as well as their effect on end points.

Implemented database activity monitoring (DAM) on MS SQL and Oracle databases.

Provided engineering support for enterprise security tools such as NAC and proxy servers when critical issues arose.

Architected, designed, and wrote policies and procedures for application whitelisting deployed throughout the environment.

Evaluated third party products and services to ensure they met security standards and integrated seamlessly and securely into the IT computing architecture.

Reviewed and approved all firewall policies before implementation.

Preformed security risk assessments on all Office Depot internal projects.

Wrote and maintained information security standards for organization.

Reviewed change controls for risk and security impact.

Developed the business, information and technical artifacts that constitute the enterprise information security architecture and solutions

Ensured security architecture standards and solutions met business objectives and regulatory compliance requirements.

Contributed to the development and maintenance of the Information Security strategy and technology roadmaps.

Analyzed business impact and exposure based on emerging security threats, vulnerabilities and risks.

Provided assistance to other departments regarding Information Security architecture issues and controls.

Designed security controls to meet PCI DSS 3.1\3.2 compliance.

Provided security guidance to secure the AWS environment used by the company.

Office Depot, Inc.

March 2012 - February 2015

Lead Systems Engineer

Lead a team of engineers to design and maintain a secure and reliable enterprise desktop and Citrix environment.

Architected, designed, and implemented a global SCCM infrastructure for 16,000 end points

Developed a locked down least privileged operating environment with over 1,100 GPO settings. These settings were setup to enforce a secure and well managed environment, including RPC restriction and delegated access

Deployed Avecto Privilege Guard to help secure environment by creating elevation rules for specific processes in place of full user administration rights

Maintained Checkpoint PointSec full disk encryption to provide offline security.

Developed and implemented central management of single user to single machine restrictions for administrative and RDP access for workstations

Engineered Google Apps migration and wrote several programs in C# to migrate data from Outlook to Gmail. Designed enterprise deployment of Google Chrome.

Setup Office 365 with AAD Sync and SAML for federated SSO with SecureAuth

Setup single KMS to work in multiple domains for Windows, Server, and Office license management

Worked with various teams and projects requesting application deployment and changes to the environment to ensure all standards and security requirements are met

Reviewed all project for desktop environment before implementation to ensure they meet standards and compliance rules.

Developed process to find network based malware in Citrix environment when antivirus is not able to

Design, engineered, and built global imaging process by implementing a single hardware agnostic image and zero touch imaging process used on all hardware, which supports all managed counties with regional and language configurations with PXE boot.

Wrote windows service in C# to detect and automatically repair broken SCCM clients. The service also kept centralized record of stats, reports, and tracking information on its actions

Created an inventory tracking program to keep track of assets in SCCM and Active Directory and a process to remove stale computer objects from the domain.

Lead a team of four other engineers, providing both personal and technical guidance and acting as a point of escalation

Office Depot, Inc.

July 2007 - March 2012

Senior Systems Engineer

Senior engineer responsible for maintaining SMS environment, packaging and deploying application, and engineering solutions to desktop problems and needs

Able to provide troubleshooting in all areas of the enterprise environment. Routinely assisted other teams in troubleshooting and resolving issues outside of desktop environment.

Provided 3rd and final level support for any issues, problems or questions within the environment

Reverse engineer Conficker/DOWNAD worm and created remediation scripts to repair machines infected with the worm.

Sapphire Technologies - Contract worker for Office Depot

April 2006 - July 2007

Systems Engineer

Support technician and engineer responsible for imaging and support for desktops

Provided support for Office Depot corporate users

Designed off network imaging process to be used in new China offices

Tools and Skills

Languages

C#, Python, BASH, T-SQL, KQL, WQL, Power Shell, VB Script, LDAP query language, Wise Scripting

Blue team tools

Qualys VM/WAS, Tenable Nessus, Snyk, Grype, Imperva SecureSphere, Splunk for Enterprise, Snort, Elastica CloudSOC, OpenSSL, Tripwire, GRR Rapid Response, AppLocker, ForeScout CounterACT, Cuckoo Sandbox, WireShark, Fiddler, NetMon, tcpdump, Sysinternal Tool Set (Procesmon, Filemon, TCP View)

Red team tools

Nmap, NetCat, DirBuster, Burp, Nikto, ILSpy, IDA, Hashcat, Ophcrack, John, Hydra, Nessus, Core Impact, Metasploit, Msfvenom, responder, PowerSploit

Application Server Knowledge

GitHub Actions, Ansible, git, docker, Kubernetes, Grafana

Office 365\Azure, Amazon Web Services, TLS, Active Directory Certificate Services\PKI, IIS, Hyper-V, Group Policy

Ryan Roseboom

Principal Cyber Security Engineer

Summary

Certifications

OSCP

Offensive Security Certified Professional

CISSP

Certified Information Systems Security Professional

CISSP-ISSAP

CISSP - Information Systems Security Architecture Professional

CEH

Certified Ethical Hack

MCP

Microsoft Certified Professional

Experience

The ODP Corporation

Principal Cyber Security Engineer

Report to and advise CISO on insights about security threats, provide strategic security plans, recommendations on prevailing industry developments, and collaborate in any role needed to enhance the overall security posture of the organization.

Office Depot, Inc.

Consultant Cyber Security Engineer

Reported into and advised CISO on security threats, provided security roadmaps, guidance on industry trends, and worked in any capacity necessary to improve the security posture of the enterprise.

Office Depot, Inc.

Lead Security Architect

Reported into CISO. Enterprise security architect responsible for assessing enterprise projects' security posture.

Office Depot, Inc.

Lead Systems Engineer

Lead a team of engineers to design and maintain a secure and reliable enterprise desktop and Citrix environment.

Office Depot, Inc.

Senior Systems Engineer

Senior engineer responsible for maintaining SMS environment, packaging and deploying application, and engineering solutions to desktop problems and needs

Sapphire Technologies - Contract worker for Office Depot

Systems Engineer

Support technician and engineer responsible for imaging and support for desktops

Tools and Skills

Languages

Blue team tools

Red team tools

Application Server Knowledge

Education

Columbia Southern University

Assoiciate of Arts - 2020