Open to opportunities

Bonifacio Capuyan

@bonifaciocapuyan

Message

Information Security professional with expertise in cybersecurity and risk management.

United States

Message

What I'm looking for

I am looking for a role that challenges me and allows for professional growth in cybersecurity.

I am an Information Security professional with extensive experience across various industries, specializing in cybersecurity, incident response, and digital forensics. My career has been marked by a proven ability to lead complex security initiatives and design effective solutions to mitigate risks in both regulated and unregulated environments. I hold an active U.S. Government Public Trust Position Clearance and have earned multiple certifications, including CISA and CISM, which underscore my commitment to maintaining high standards in information security.

In my current role as a Senior Staff Information Security Engineer at ServiceNow, I lead a team of developers, guiding the architecture and design of SecOps applications. I have successfully developed applications to meet FedRAMP regulations and integrated various vulnerability management tools, enhancing our security posture. My experience also includes mentoring cybersecurity students, where I provide guidance and support to help them develop industry-relevant competencies. I am passionate about fostering the next generation of cybersecurity professionals and sharing my knowledge to help them succeed in their careers.

Experience

Work history, roles, and key accomplishments

Current

Senior Staff Information Security Engineer

Current

ServiceNow

May 2020 - Present (5 years 1 month)

Led a team of 7 ServiceNow developers, providing technical guidance on architecture and design for new and existing SecOps applications. Developed and deployed Vulnerability Response applications, including POA&M and Container Vulnerability Response, to satisfy FedRAMP regulations and integrate with various security tools. Configured and administered Tenable.sc and Tenable.io, and created custom r

ServiceNow SecOps FedRAMP Tenable.Sc Tenable Power BI Splunk MySQL API Integration

Current

Cybersecurity Mentor

Current

Springboard

Jun 2022 - Present (3 years)

Mentored students enrolled in the University of South Florida's Cybersecurity Bootcamp, providing guidance, motivation, and technical support. Conducted weekly one-on-one Zoom sessions to address questions related to cybersecurity concepts, career development, and course curriculum. Reviewed and assessed student assignments and capstone projects, offering detailed feedback to support continuous im

Cybersecurity Mentoring Network Security Incident Response Penetration Testing Security Compliance Career Development

Security Solution Architect

Nuvolo

Dec 2019 - May 2020 (5 months)

Served as a Security Solution Architect consultant for healthcare clients, installing and integrating the Nuvolo OT Cybersecurity product on their ServiceNow Platform. Managed a team of software and platform developers for custom medical device asset management applications. Assisted clients by assessing their current technical security posture, vulnerability management, and governance, while conf

Security Architecture ServiceNow Vulnerability Management GRC SecOps Agile API Integration

Senior Security Engineer

Robert Half

Apr 2014 - Jun 2016 (2 years 2 months)

Managed, designed, and administered the Splunk with Enterprise Security infrastructure in Amazon EC2, aggregating log sources from various security devices. Built Splunk dashboards and alerts for monitoring global login activity and tracking security operations metrics via ServiceNow API. Developed automated dashboards and software to process and analyze Qualys vulnerability data for enterprise-wi

Splunk Enterprise Security Amazon EC2 Log Management Security Operations Qualys Vulnerability Assessment Risk Analysis eDiscovery Forensics

Software Engineer

Robert Half

Apr 2016 - Dec 2020 (4 years 8 months)

Developed REST API and Database Connection applications to retrieve database tables from various sources like ServiceNow, CIC, ShoreTel, Prisma Cloud, and Rapid 7. Transformed and stored this data into MySQL and Azure SQL Databases for Business Intelligence and Data Analytics. Designed and administered Microsoft Power BI Content Packs, Applications, and Reports for executive management.

REST APIs Database Management MySQL Azure SQL Power BI Business Intelligence Data Analytics ServiceNow ETL

Lead Information Security Engineer

Fremont Bank

Dec 2012 - Apr 2014 (1 year 4 months)

Rebuilt Fremont Bank’s entire Information Security Infrastructure, serving as Architect, Project Manager, and Lead Security Engineer on all projects. Centralized network traffic and logs into QRadar SIEM, and installed Imperva WAF and database activity monitoring for GLBA and FDIC compliance. Managed vulnerability and patch management programs, reducing high-severity vulnerabilities to zero, and p

Information Security SIEM Imperva Incident Response Digital Forensics Vulnerability Management Patch Management GLBA Risk Assessment Palo Alto Networks

Education

Degrees, certifications, and relevant coursework

University of South Florida

Cybersecurity Bootcamp, Cybersecurity

Activities and societies: Mentored students in network security, threat analysis, incident response, penetration testing, and security compliance. Reviewed and assessed student assignments and capstone projects, offering detailed feedback.

Served as a dedicated mentor for students enrolled in the University of South Florida's Cybersecurity Bootcamp. Provided guidance, motivation, and technical support throughout the program, conducting weekly one-on-one Zoom sessions to address questions related to cybersecurity concepts and career development.

Franciscan University of Steubenville

B.S. Business Administration Management, Business Administration Management

Studied Business Administration Management at Franciscan University of Steubenville. Gained foundational knowledge in business principles and management practices.