johnnie Armstrong

I’m a Product Security Engineer with experience securing large-scale, safety-critical systems. I focus on automation, software security, threat modeling, secure architecture, vulnerability management, and compliance.

I engineer Python-based tooling to automate the detection, logging, and management of supply chain software security vulnerabilities. I’ve built Splunk infrastructure for anomaly detection and fleetwide security monitoring, and I help teams translate security findings into real operational guidance.

I lead investigations for incident response and vulnerability teams, delivering risk-based mitigation recommendations to engineering and leadership. I incorporate SBOMs for critical systems, author security requirements and architecture diagrams, and collaborate cross-departmentally to improve security and software quality processes.

My work is grounded in standards and regulatory alignment, including NIST 800-53/82/218, ISO 27001, SOC 2, FAA, HIPAA, and GDPR, alongside frameworks like MITRE ATT&CK. I also develop and apply secure-by-design practices across complex product lifecycles.