Ryan Ayres

Designed and owned a 60-module Terraform security foundation for AWS and Kubernetes, built a security findings store and portal, and developed detective controls for FedRAMP/NIST 800-53 Rev 5-aligned infrastructure.

Led cloud security program for a SaaS GovTech platform, deployed Wiz for cloud asset visibility, built vulnerability management program, and led StateRAMP, SOC 2, and PCI-DSS audits to first-attempt certification.

Deployed Wiz across Azure and AWS for 100% cloud asset visibility, wrote Python automation to reduce mean time to resolution by 35%, and built the vulnerability management program from scratch.

Deployed Splunk as central SIEM for IT and OT networks, directed security architecture across cloud and on-premise systems, and rolled out VPN + MFA remote access with incident-response playbooks.

Splunk architect and data custodian for AWS and on-premise environments, securing 40+ TB of data with role-based access and separation of duties, and built SOC detections mapped to the Cyber Kill Chain.

Lead security coordinator for an Azure migration that merged two data centers into one with no loss of monitoring, and consolidated all PKI into a single environment with zero downtime.

Primary incident handler for the 2016 Arizona election-systems investigation, leading forensics and response to an attempted intrusion into the state voter-registration system, and built SOC visibility and alerting mapped to the Cyber Kill Chain.

Led a 4-person team as NCOIC, Special Operations Division, and served as Lead Database Analyst at the Joint Intelligence Operations Center in Kabul.

Managed PCI-DSS security keys and certificates for large-scale online retail.

Earned an M.B.A. from University of Maryland Global Campus in 2018.

Earned an M.S. in Cybersecurity from University of Maryland Global Campus in 2017.

Earned a B.S. in Network Engineering and a B.S. in Network Security from University of Advancing Technology in 2014.