Stanley Paul

Engineers Palo Alto NGFW architecture, network segmentation standards, and integrated security controls across Microsoft 365 security, Netskope CASB, Varonis DLP, Cortex XDR, Proofpoint, and ExtraHop. Leads alert triage, incident command support, vulnerability management prioritization, and clinical/IT security architecture guidance for patient-care continuity.

Supports cyber-defense readiness for critical infrastructure through incident-response planning and incident command support, threat intelligence analysis, and red/blue team exercises. Provides security education and operational mission support, including adversarial simulation activities.

Architects Zero Trust segmentation and trust boundaries to protect sensitive research data while supporting multi-organization collaboration. Maps NIST RMF and CMMC to technical controls and leads secure-by-design reviews, including federated identity and PKI work across AWS, Azure, and GCP using Tenable Cloud Security.

Launches Datadog SIEM integrations with detection logic and SOAR-oriented response workflows to improve visibility across cloud and SaaS applications. Builds behavioral monitoring for insider risk and data-loss events, applies DLP/data classification controls, and advises secure development lifecycle practices aligned to HIPAA, HITRUST, NIST, and SOC 2.

Configures Imperva WAF policies for 30+ clinical web applications to reduce malicious traffic while preserving clinical access and web-application security. Authors Microsoft Sentinel and Splunk detections aligned with MITRE ATT&CK, leads medical-IoT security efforts for 2,000+ devices, and standardizes security testing and control assessments using NIST CSF and CIS Benchmarks.

Designs communications and network-security architecture across LAN/WAN sites, including segmentation, access controls, encrypted remote access, and secure protocols. Refines SIEM detection logic and alert tuning, and supports containment, root-cause analysis, and remediation playbooks to improve incident-response consistency.

Supports enterprise system administration and network operations for Cisco and Meraki LAN/WAN environments while maintaining service continuity. Administers Windows Server and client/server systems and supports file systems, internet resources, and communications protocols for ongoing operations.

Hardened 700 biometric registration units with operating-system updates, PKI-enabled encryption, key-management practices, and field-appropriate safeguards. Established the organization’s first centralized SIEM and intrusion-detection capability and led network-based vulnerability scanning and remediation across 500+ assets.

Executive MBA candidate at Suffolk University with an expected completion in December 2026.

Grade: GPA: 3.1/4.0

Master of Science in Information Security from Boston University, completed in December 2022.