Paul E Usama

Performs security architecture reviews and risk assessments for new and changing platforms, integrations, and projects. Assesses authentication, authorization, and privileged access design, and reviews Azure cloud configurations against Microsoft guidance and internal standards.

Led comprehensive risk and control assessments across cloud and hybrid environments, aligning with NIST RMF, ISO 27001, and SOC 2 frameworks. Managed cloud security operations across Azure and Microsoft 365, and led incident response and forensic investigations.

Conducted security awareness training and phishing simulation campaigns, improving phishing report rate by 7%. Established automated third-party risk assessment program using CyberGRX and UpGuard, and integrated automated security testing into CI/CD pipelines.

Led vulnerability and patch management, shifting to a risk exposure approach and reducing infrastructure attack surface. Implemented Microsoft Defender for Cloud across Azure subscriptions and architected Windows security stack with Defender ATP.

Conducted comprehensive risk assessments and managed third-party security risks. Designed and implemented an automated security awareness training platform using KnowBe4, and developed continuous security monitoring infrastructure.

Contributed to security policy development and performed vulnerability management using Qualys. Managed security awareness programs and performed security monitoring and incident response.

Provided tier 1 and 2 support for hardware, applications, and network issues, including root cause analysis and troubleshooting.

Maintained and modified ASA firewall rules, monitored network security alerts, and participated in network gear upgrades. Monitored Layer 2 and Layer 3 network gears on SolarWinds Orion for security and performance issues.

Pursuing a Master of Science in Information Systems and Security Management.