Open to opportunities

Ryan User

@ryanuser15

Message

Cybersecurity and data protection consultant driving risk reduction and cost-optimized security solutions.

United States

Message

What I'm looking for

I seek roles where I can lead detection and identity initiatives, drive measurable risk reduction, and mentor teams while optimizing security costs.

I am a cybersecurity and data protection consultant who combines strategic advisory perspective with hands-on execution to reduce enterprise risk, optimize security operating costs, and strengthen detection and access controls across cloud and on-prem environments. I have delivered over 30% SIEM ingestion cost reductions using log enrichment, implemented large-scale identity controls for thousands of users, and developed custom detection logic to improve visibility into data and cloud risk.

I have designed and deployed Microsoft Azure security services across multiple global regions, performed security and risk assessments aligned to industry best practices, and led cyber governance, risk, and compliance initiatives. My background includes cyber detection engineering, incident response improvements, and mentoring emerging cybersecurity talent through hands-on team engagement.

Experience

Work history, roles, and key accomplishments

Current

Advisory Blue Consultant

Current

Security Risk Advisors

Sep 2023 - Present (2 years 4 months)

Delivered log enrichment and cost-optimization solutions using Cribl to achieve over 30% SIEM ingestion cost reductions, designed Azure security services across six regions, and developed 20+ SIEM detection rules to improve visibility and incident response.

Cribl Splunk Microsoft Azure SIEM Detection Engineering Cloud Security Risk Assessment

Cyber Security Officer

Central Intelligence Agency

Sep 2022 - Mar 2023 (6 months)

Designed and deployed detection and analysis capabilities that improved daily security operations, identified advanced threats via automated workflows, and built 10+ custom detection rules for a cloud vulnerability scanning platform.

Detection Engineering SIEM Security Operations Incident Response

Information Security Analyst

Berkley Technology Services

Sep 2021 - Mar 2022 (6 months)

Led resolution of hundreds of high-priority security requests and incidents across subsidiaries, partnered with cross-functional teams on remediation, and delivered a large-scale MFA rollout for thousands of users to strengthen identity controls.

Incident Response SIEM Identity & Access Management Cross Functional Collaboration Security Operations Risk Management

Education

Degrees, certifications, and relevant coursework

Drexel University

Bachelor of Science, Computing and Security Technology

Grade: 3.90

Activities and societies: Drexel CyberDragons involvement including red/blue/purple teaming and mentoring; In-class network design and deployment project.

Bachelor of Science in Computing and Security Technology with a 3.90 GPA and specialization in computing security.