Open to opportunities

Russell Dwyer

@dwyer93

Message

Senior cloud security engineer specializing in DevSecOps and SecOps.

United States

Message

What I'm looking for

I seek roles where I can lead cloud/DevSecOps security initiatives, mentor teams, implement SIEM and IAM programs, and drive IaC policy enforcement in collaborative, security-first environments.

I am a senior cloud security engineer with extensive experience architecting SIEM, SecOps, and cloud security controls for enterprise and startup environments. I combine hands-on technical skills with advisory experience to deliver secure runtime, CI/CD, and identity solutions.

My accomplishments include leading enterprise DevSecOps hardening initiatives, delivering single-pane-of-glass SIEM solutions, and implementing enterprise secrets and IAM programs using tools like Splunk, Prisma Cloud, HashiCorp Vault, SailPoint, and Entra ID. I have driven vulnerability management, automated IaC policy enforcement, and network/hybrid cloud hardening across AWS, Azure, and GCP.

I hold CISSP and multiple cloud and tooling certifications, mentor engineering teams on secure coding and operational practices, and serve as a trusted advisor to senior leadership to align security, risk, and compliance with business objectives.

Experience

Work history, roles, and key accomplishments

Current

Principal Security Consultant

Current

IronIntelligence, LLP

Mar 2025 - Present (1 year)

Delivered end-to-end cloud security and SecOps consulting for fintech and small enterprises, implementing SOC, SIEM, SOAR, and continuous monitoring to improve detection and reduce risk. Acted as primary liaison with clients, leadership, and legal to align SaaS contracts and SLAs with risk mitigation policies.

SIEM SOAR Splunk Chronicle Tines Cloud Security Security Consulting

Sr. Cloud Security Engineer

BCD Travel USA

Aug 2023 - Mar 2025 (1 year 7 months)

Led enterprise DevSecOps hardening initiative, delivering runtime/network visibility, CNAPP/CSPM/DSPM controls, and IaC compliance to reduce cloud attack surface and remediate IAM and vulnerability risks. Architected secure integrations including Databricks and a single-pane SIEM using Prisma Cloud, Splunk, and automation tools.

Terraform Python Prisma Splunk CI CD IAM CSP

Sr. Information Systems Technician

Valley Water

Apr 2021 - Mar 2023 (1 year 11 months)

Led Next-Gen NIDS and enterprise SIEM implementation, achieving full observability and improved alert fidelity while directing red/blue team evaluations and building SecOps/SOAR playbooks. Migrated HSM/secrets to Bitwarden Enterprise and HashiCorp Vault and led identity security and incident response programs.

Graylog Splunk SOAR IAM Incident Response SIEM Engineering

Information Security SME

AC Transit Agency

Jan 2020 - Sep 2020 (8 months)

Designed and deployed Tenable Nessus vulnerability management and Okta SSO/OIDC integrations, enforcing MFA and automated IAM provisioning to reduce exposure and ensure patch compliance across enterprise systems.

Nessus Okta SSO OIDC SCCM PowerShell Vulnerability Management

Linux DevSecOps Architect

Samsung AI Labs

Apr 2019 - Dec 2019 (8 months)

Secured CI/CD pipelines and developer platforms by integrating SAST/SCA/DAST, policy guardrails, and SSO federation for ML research environments, improving pipeline security and reducing insecure coding patterns.

CI CD SAST DAST Prisma SonarQube OpenShift OIDC Kubernetes

Information Security Engineer

KLA Tencor

Nov 2018 - Apr 2019 (5 months)

Engineered corporate SSO with Okta/Ping Identity and implemented MFA while leading third-party risk assessments and red-team exercises to identify and remediate supply-chain and AD/host vulnerabilities.

Okta MFA Penetration Testing Nessus AD Security

Information Security Analyst

AT&T AlienVault

May 2016 - May 2017 (1 year)

Deployed and tuned AlienVault SIEM appliances, improving alert fidelity and delivering tier-3 incident response for high-profile and DoD clients, achieving consistent client satisfaction in mission-critical environments.

AlienVault SIEM Tuning Incident Response Threat Intelligence SOC Operations

Linux System Administrator

University of Michigan

Feb 2015 - May 2016 (1 year 3 months)

Maintained Red Hat Linux server fleets and supported HPC clusters with Ansible and Puppet automation, providing on-call support and configuration management to ensure resilient scientific compute environments.

Ansible Puppet Nagios VMWare HPC Linux Administration Configuration Management

Technical Support Engineer

Barracuda Networks

Feb 2013 - Aug 2014 (1 year 6 months)

Provided Tier-1 support for Barracuda NGFW, web-filter, and email security appliances, earning promotion to team lead and gaining hands-on networking and Linux diagnostics experience.

Email Security Troubleshooting Networking Customer Support