Open to opportunities

Jonathan Taylor

@jonathantaylor

Senior Cyber Security Engineer specializing in DevSecOps, cloud security, and security automation across CI/CD and SOC workflows.

United States

Message

What I'm looking for

I’m looking for a role where I can build security automation and detection engineering across CI/CD and the SDLC, partner with SOC/engineering teams on shift-left practices, and help strengthen compliance-ready, cloud-native security outcomes.

I’m a Senior Cyber Security Engineer with 12+ years of cybersecurity engineering experience, focused on integrating security across the software development lifecycle through security automation and shift-left practices. I architect and secure AWS cloud-native environments and translate security requirements into actionable engineering plans aligned with PCI and ISO 27001.

In my current role, I design and deploy security pipelines that deepen SOC capabilities through Splunk SIEM and SentinelOne EDR, orchestrated with Swimlane SOAR to reduce mean time to detect enterprise threats. I build threat-intelligence ingestion systems in Python, develop SOAR playbooks that enrich and suppress alert noise automatically, and partner with SOC analysts to refine detection logic and reduce false positives.

I’ve also strengthened enterprise security posture through network segmentation and policy engineering (Palo Alto and Fortinet), compliance alignment to NIST 800-53 and ISO 27001, and expanded visibility by integrating Azure Sentinel for improved log analytics and monitoring. Earlier roles included revamping SIEM ingestion and detection engineering at scale with Python, rebuilding threat investigation capabilities using Go, supporting regulated-client security operations via Cortex XSOAR and PowerShell automation, and leading Splunk/network security foundations that improved operational efficiency and audit readiness.

Experience

Work history, roles, and key accomplishments

Current

Senior Security Engineer

Current

Jackson Financial

Jan 2024 - Present (2 years 6 months)

Designed and deployed integrated SOC security pipelines by connecting Splunk SIEM with SentinelOne EDR and automating workflows in Swimlane SOAR to reduce mean time to detect enterprise threats. Implemented firewall segmentation and detection automation, tuned correlation logic to reduce false positives, and authored security reference architecture aligned to NIST 800-53 and ISO 27001.

Splunk SentinelOne Swimlane Palo Alto NGFW Python PowerShell NIST 800 53 ISO 27001

Cyber Security Engineer

Comcast

Jun 2019 - Dec 2023 (4 years 6 months)

Improved SOC operations by revamping detection pipelines for Fortinet UTM alerts and building end-to-end alert automation with Python in Swimlane SOAR to reduce investigation time. Rebuilt threat investigation ingestion with Google Go to process millions of raw events daily, delivered Elastic KPI dashboards for SOC metrics, and supported PCI-DSS and HIPAA audit readiness via Splunk Enterprise Secu

Fortinet Swimlane Python Splunk Enterprise Elastic PowerShell Wireshark PCI DSS

Senior Cyber Security Analyst

Cyber Defense Labs

Mar 2016 - May 2019 (3 years 2 months)

Provided cybersecurity consulting across globally distributed clients, including firewall architecture reviews, SOC workflow assessments, and incident response support in regulated industries. Automated security operations using Palo Alto Cortex XSOAR and Python playbooks, extended threat analysis via a PowerShell wrapper for the Securonix API, and delivered detection engineering across MITRE ATT&

Python PowerShell Securonix Splunk Azure Sentinel Sigma Incident Response

Network Engineer

MetaSource

Oct 2014 - Feb 2016 (1 year 4 months)

Administered and optimized Splunk Enterprise Security monitoring by resolving logging resource issues and creating real-time dashboards for security events. Implemented and tuned network security controls including F5 ASM/WAF, VLAN segmentation with Cisco and Palo Alto firewalls, automated IIS SSL certificate rotation with PowerShell and Active Directory, and supported threat containment using Tre

Splunk Enterprise Cisco Palo Alto NGFW PowerShell Active Directory Wireshark Windows Pktmon VLAN