Looking for a job

Michael-Paul Brown

@michael-paulbrown

Cybersecurity consultant at Palo Alto Networks who helped banks cut threat response time from 42 minutes to 40 seconds with AI-driven remediation.

United States

Message

At Palo Alto Networks, I advise customers on cybersecurity architecture and implementation across cloud, DevSecOps, endpoints, and AI. I designed AI-driven autonomous remediation for regional banks, reducing MTTR from 42 minutes to 40 seconds.

I also established governance guardrails for agent-to-agent MCP communication and led security assessments across cloud, AI, applications, APIs, and endpoints. An assessment identified ungoverned AI use across 3,200 end-user endpoints, and I built a remediation roadmap to address it.

Previously, at Amazon Web Services, I worked on government cloud migrations and scripted secure AWS deployments and compliance reporting in Python. At Logicworks and N2W Software, I designed secure cloud architectures, CI/CD pipelines, and disaster recovery environments.

Experience

Work history, roles, and key accomplishments

Current

Cortex & Cloud Specialist

Current

Palo Alto Networks

Jul 2026 - Present (2 months)

Leading AI agentic SOC modernization for a regional financial services customer, adopting AI agents to autonomously investigate and respond to threats, cutting MTTR by 73%.

AI SOC MTTR Reduction Agentic AI Threat Investigation Financial Services

Domain Consultant II

Palo Alto Networks

Jan 2024 - Jul 2026 (2 years 6 months)

Consulted with customers on EDR and identity threat detection, covering privilege-escalation, lateral-movement, least-privilege enforcement, and reduced MTTD by 70%. Established AI governance guardrails over agent-to-agent MCP communication and permissions, driving adoption of agentic AI security.

EDR Identity Threat Detection and Response (ITDR)OS Privilege Escalation Lateral Movement Least Privilege AI Governance MCP Agentic AI Security API Security Kubernetes AI Driven Remediation Cloud Security Security Assessments Data Exfiltration MCP Servers

GovTech Solutions Architect

Amazon Web Services

Mar 2022 - Jan 2024 (1 year 10 months)

Lead security architect on multiple government cloud migrations, applying NIST 800-53, FedRAMP, PCI DSS, and SOC 2 controls across IAM, network, and workload design. Scripted secure AWS deployment and service configuration in Python using the AWS SDK, automating security-hardened builds and compliance reporting across customer environments.

NIST 800 53 FedRAMP PCI DSS SOC2 IAM Network Security AWS SDK Python Security Hub GuardDuty Inspector AWS Well Architected Framework Amazon EKS DevSecOps Cost Reduction

Cloud Solutions Architect

Logicworks

Aug 2020 - Mar 2022 (1 year 7 months)

Designed security reference architectures deployed across multiple financial services clients, accelerating innovation, by auto-remediating common AWS misconfigurations. Built secure CI/CD pipelines (Jenkins, GitHub, cloud-native services), cutting deployment times 40%.

AWS Security Architecture CI CD Jenkins GitHub Cloud Native DevSecOps Microservices Fintech Healthcare

Lead Solutions Architect

N2W Software

Apr 2018 - Aug 2020 (2 years 4 months)

Designed, built and validated compliant multi-region disaster recovery environments, securing over 26 petabytes of customer cloud data reducing RTO by 80%. Implemented AWS encryption and key management system protecting critical data at rest and in transit between regions.

Disaster Recovery AWS Encryption Key Management IAM Transit Gateway Infrastructure as Code Cost Savings

Systems Engineer

Woolbright Development

Oct 2014 - Apr 2018 (3 years 6 months)

Implemented threat protection and behavioral analytics for endpoints providing real time active monitoring and blocking of malicious actions using McAfee Endpoint Security. Designed and implemented an AWS VPN tunnel allowing the secure private transfer of data between branch sites.

McAfee Endpoint Security Threat Protection Behavioral Analytics AWS VPN EC2 Cost Analysis Migration