Open to opportunities

Delaney Scarangella

@dscarangella

Message

Results-driven cybersecurity leader specializing in cloud security, DevSecOps, and threat management.

United States

Message

What I'm looking for

I seek a security engineering role where I can lead cloud security, DevSecOps, and threat detection initiatives in a collaborative, security-focused team that values automation and measurable risk reduction.

I am a cybersecurity leader with 10+ years of experience strengthening enterprise security postures through cloud security implementation, advanced threat modeling, endpoint defense, and automation. I have led DevSecOps transformations, implemented Zero Trust architectures, and optimized security operations across AWS and GCP to reduce detection and remediation times.

My hands-on achievements include architecting SIEM solutions, automating security pipelines and scans, deploying MDM and PAM solutions for complete endpoint visibility, and developing repeatable security playbooks and SOPs. I deliver measurable risk reduction and operational efficiency while aligning programs with NIST, MITRE ATT&CK, CIS, and ISO standards.

Experience

Work history, roles, and key accomplishments

Current

IT Security Engineer II

Current

Universal Service Administrative Company

Apr 2025 - Present (10 months)

Manages vulnerability and application security platforms (Rapid7 InsightVM, Veracode) and implemented DAST and automation that improved scan efficiency and identified critical vulnerabilities; created Splunk queries detecting 159,000+ outdated authentication protocols for POA&M development.

Vulnerability Management Veracode Rapid7 InsightVM Splunk DAST Incident Response

Senior Security Engineer

Provable Inc

Aug 2024 - Feb 2025 (6 months)

Architected and deployed USM Anywhere SIEM across AWS/GCP reducing detection time by 40%, led DevSecOps automation and GitHub Actions integration cutting vulnerabilities reaching production by 35% and remediation time by 45%, and implemented enterprise Zero Trust via Cloudflare.

SIEM USM Anywhere AWS GCP DevSecOps GitHub Actions Terraform Ansible Cloudflare

Security Engineer

RipRap Security

Apr 2024 - Aug 2024 (4 months)

Designed phishing simulations improving security awareness 35%, implemented CIS Benchmark hardening across Google Workspace and Azure, and authored SOPs and DLP policies to prevent data exfiltration.

Google Workspace Azure Google DLP SOPs Incident Response

Senior Cybersecurity Consultant

Ernst & Young

Mar 2022 - Apr 2024 (2 years 1 month)

Led STRIDE threat modeling and security hardening for Fortune 500 clients yielding a 10% improvement in security posture, deployed Tanium threat-hunting and privileged access controls in Azure, and authored incident response runbooks reducing resolution time.

Threat Modeling STRIDE Model Tanium NIST CIS Incident Response Risk Register

Endpoint Engineer

Booz Allen Hamilton

Jun 2019 - Mar 2022 (2 years 9 months)

Implemented Tanium and Carbon Black for federal clients, conducted Tenable/Nessus compliance audits achieving 95% CIS compliance, and developed custom sensors to enhance threat detection.

Tanium Carbon Black Tenable Endpoint Protection Federal Compliance Threat Hunting

Systems Engineer

Geico

Jul 2014 - Jun 2019 (4 years 11 months)

Developed automation scripts that halved manual patch deployment effort, implemented BeyondTrust privileged access across 100,000+ systems, and managed PKI, HSM, Trend Micro, and Carbon Black patches to maintain compliance.

Scripting Patch Management BeyondTrust PKI HSMs Carbon Black & Compliance

Education

Degrees, certifications, and relevant coursework

The Pennsylvania State University

Bachelor of Science, Information Sciences & Technology

2009 - 2013

Completed a Bachelor of Science in Information Sciences & Technology with a minor in Cybersecurity, focusing on information security principles and applied technologies.