Zachary Blocher

I’m a cyber security analyst who supports clients through SOC 2, ISO 27001, GDPR, HIPAA, and CMMC by completing compliance tasks, troubleshooting cloud security issues, configuring required controls, performing risk assessments, and preparing evidence that enables successful audits.

On the security engineering side, I execute work across AWS, GCP, and Azure—enabling logging (VPC logs, audit logs), strengthening IAM roles, configuring Security Groups and firewall rules, and setting up monitoring and alerts on cloud resources. I also operate compliance automation platforms like Vanta, Drata, and Secureframe to streamline control mapping and evidence upload/explanations, and I author SOPs and onboarding documentation while training new analysts on GRC platforms and cloud security engineering processes.

Previously, as a TIS Intern at Trinity Health, I built a REST API-driven Python system to automate microservice scaling, improving resource utilization and driving a 10% efficiency increase for the team. I analyzed 100 DAST Checkmarx-reported vulnerabilities each week with detailed recommendations, helped implement onboarding used to onboard 100+ employees per year, and used JIRA and ServiceNow for incident and ticket triage while collaborating daily with engineering teams.