One Park Financial

Security Engineer

• Ecosystem Auditing: Direct oversight and periodic auditing of WithSecure (EDR), Microsoft Purview (DLP), and Mimecast to ensure no "Catch-all" rules or unauthorized exceptions exist.
• Identity & Access Governance: Audit Okta and Entra ID logs to identify anomalous sign-ins, focusing on "Unknown" or "Unmanaged" devices attempting to access sensitive SaaS like Salesforce.
• AI-Powered Forensic Pipeline: Design and implement automation scripts (Python/API) to summarize quarantined emails and attachments using LLMs (Claude/OpenAI), converting raw security logs into actionable forensic artifacts.
• Data Flow Analysis: Monitor and audit data movement between endpoints and cloud storage, ensuring integration between security tools and a centralized repository for long-term forensic hunting.
• Incident Accountability: Provide forensic evidence for HR and legal proceedings regarding internal data misuse or policy violations.

Principal Security Engineer – Data Protection, Forensic Automation