Looking for a job

Scott Blasing

@scottblasing

Message

I’m a senior security engineer who builds automated, high-performance detection and response systems.

United States

Message

What I'm looking for

I’m looking to build and optimize security automation—ETL-driven investigations, SIEM/SOC detections, and incident response—using high-performance engineering and strong collaboration to reduce MTTR and improve signal fidelity.

I have spent over a decade working at the intersection of data analysis, software engineering, and security, but I approach every project with the same mindset: I want to understand the first principles of the problem and the environment I work in before implementation. I don’t believe in just adding more tools to a stack. Instead, I use data-driven methodologies to find out where a workflow is breaking down or where resources cannot meet demand. In my recent work, that meant moving away from standard SIEM limitations and building custom Python engines that optimized telemetry processing from quadratic to linear. Whether I am architecting ETL pipelines, serving as an Incident Commander, or building custom security detections, my goal is to strip away the noise. I build automated systems that handle the heavy lifting so that human analysts can actually focus on high-value investigations. For me, effective security engineering requires in-depth knowledge of the environment, behaviors, and the data each generates. With a full understanding of each, I will build systems that can reliably, accurately, and efficiently solve your problems.

In recent roles, I’ve architected a multithreaded telemetry processing engine to reduce investigation package creation time by 90%, built custom SIEM parsers and MITRE ATT&CK mapped detection rules, and coordinated remediation and incident response efforts, including serving as Incident Commander to reduce Mean Time to Resolution (MTTR) by an estimated 30%.

Experience

Work history, roles, and key accomplishments

Senior Security Analyst

Johnson & Johnson

Jun 2025 - Mar 2026 (9 months)

During this contract role, I bridged the gap between security governance and operational response by engineering custom automation. I optimized telemetry processing speed and built modular ETL pipelines to normalize complex data, directly reducing analyst turnaround time. By circumventing platform limitations through custom code, I transformed fragmented logs into actionable intelligence.

Python REST APIs Microsoft Purview Polars Aho Corasick VSCode Jupyter Notebooks

Senior Security Operations Analyst

LastPass

Jan 2024 - Feb 2025 (1 year 1 month)

Led high-priority incident response and proactive threat hunting across multi-cloud environments. I used a data-driven approach to coordinate containment as Incident Commander, significantly reducing recovery times. My focus was on identifying sophisticated behavioral anomalies and integrating custom software to align security operations with broader business goals.

Crowdstrike MS Sentinel Kusto Query Language (KQL)Tines Wiz AWS

Senior Information Security Analyst

KPMG US

Jan 2023 - Jan 2024 (1 year)

Focused on improving signal fidelity and operational efficiency within complex ecosystems. I performed high-velocity analysis to isolate true threats from noise and established feedback loops to refine detection logic. Beyond technical remediation, I developed the standard operating procedures and mentored junior talent to harden the team's baseline.

SentinelOne MS Sentinel

Information Security Specialist

Grow Financial Federal Credit Union

Jul 2018 - Dec 2022 (4 years 5 months)

Architected the enterprise-wide evolution of SIEM, DLP, and cloud security frameworks. I led the technical strategy for migrating to Azure Hybrid environments, ensuring data protection across both network and endpoint layers. I owned the full lifecycle of security posture management, from forensic analysis and alert tuning to leading regulatory audits.

Network DLP Endpoint DLP Azure Palo Alto PRISMA Cloud Palo Alto NGFW EDR SIEM Cloud Access Security Broker (CASB)Full Disk Encryption Proxy Configuration Management Vulnerability Management Vulnerability Scanning Solutions Linux Server Administration Windows Server Administration

Support Technician

Snowcloud Services

Aug 2016 - May 2018 (1 year 9 months)

Established and maintained secure infrastructure baselines for a diverse client base, including healthcare and government sectors. I focused on hardening network appliances and managing disaster recovery solutions to ensure high data availability. My work centered on provisioning secure, resilient environments across on-premises and SaaS platforms.

Ubiquiti Unifi Microsoft 365 Administration Networking VBA Programming Ticketing Platforms VoIP VPN Client Configuration Windows Server Administration Linux Server Administration

Industrial Engineering Tech

Advance Auto Parts

Jul 2010 - May 2016 (5 years 10 months)

I managed daily operations and IT systems, focusing on process optimization and infrastructure integrity. I used data analysis and workload forecasting to identify workflow bottlenecks and align resources with fluctuating demand. By analyzing system logic and throughput, I re-engineered manual processes to reduce operational overhead and improve efficiency in high-pressure environments.

SQL Access Oracle