Skip to main content
Luke MillerLM
Open to opportunities

Luke Miller

@lukemiller

Security engineer at Genesys Cloud who built Signal9, a DFIR and Linux training platform with automated, state-graded labs.

United States
Message

At Genesys Cloud, I designed and shipped event-driven security automation for the FedRAMP environment using Lambda, Step Functions, and EventBridge. I also managed security operations and engineering teams and aligned project priorities with risk and compliance obligations.

I built and operated security tooling across a multi-account AWS environment, developed detection content, and validated it with adversary emulation. I also engineered and operated an AWS-hosted forensic pipeline using AXIOM and F-Response.

I founded and operate Signal9, a DFIR and Linux training platform with hands-on, state-graded labs. I author the content and build the automated grading and environment provisioning; I also test and troubleshoot lab images and write documentation.

Through intmain, I teach C with interactive, auto-checked exercises using the same content pipeline and deployment tooling. My work also includes incident response, forensics, and cyber operations in the Air National Guard.

Experience

Work history, roles, and key accomplishments

UG
Current

Cyber Effects Operations Officer, Offensive (17SA)

U.S. Air Force, Air National Guard

Jan 2013 - Present (13 years 8 months)

Plan and lead offensive cyberspace operations under established authorities and rules of engagement, including mission planning, target and access development, risk and deconfliction review, effects delivery, and post-mission reporting. Lead enlisted cyber operators through mission rehearsal and execution and translate adversary tradecraft into training scenarios.

GC

Manager, Security Operations and Engineering

Genesys Cloud

Feb 2025 - Oct 2025 (8 months)

Managed the Security Operations and Engineering team for the FedRAMP environment, owning hiring, performance reviews, compensation assessments, and career development. Prioritized the team's project portfolio against risk and compliance obligations and reported incident trends and program health to senior leadership.

GC

Team Lead, Security Operations and Engineering

Genesys Cloud

Jan 2021 - Feb 2025 (4 years 1 month)

Owned the security tooling stack across a multi-account AWS environment, including CrowdStrike Falcon, SentinelOne, SumoLogic SIEM, GuardDuty, Security Hub, Detective, and CloudTrail. Built and tuned detection content across EDR and SIEM, validated with adversary emulation, and developed hands-on training for analysts.

GC

Senior Security Engineer

Genesys Cloud

Nov 2019 - Jan 2021 (1 year 2 months)

Led incident response for Genesys Cloud, investigating sophisticated threats across Windows and macOS endpoints and Amazon Linux production servers. Deployed and owned the full security tool suite, including EDR rollout to 5,000 endpoints, and automated investigation workflows in Python and PowerShell.

Education

Degrees, certifications, and relevant coursework

Illinois State University logoIU

Illinois State University

Bachelor of Science, Computer Science

Bachelor of Science in Computer Science from Illinois State University, completed in 2017.

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan