Summary
Overview
Work History
Education
Skills
Certification
Timeline

MATTHEW OSUGO

Regina,Saskatchewan

Summary

Cloud security analyst with over 9 years of experience in network support and security engineering, talented at resolving highly technical issues efficiently to maintain uptime and increase productivity levels. Experienced in both securing cloud infrastructure setup, onsite data center, and enterprise networks. Understands various AWS cloud services and their security applications, with vast knowledge of routed and routing protocols, troubleshooting and configuration of routers, switches, load balancers, firewalls, WAF, and SIEM solutions.

Overview

9
9
years of professional experience
6
6
Certificate

Work History

Security Analyst

Quidax Technologies
Estonia
04.2022 - Current
  • Identified and mitigated security threats and vulnerabilities using security tools such as CloudFlare, Paloalto Firewall, Endpoint security tools, SIEM and others.
  • Utilized GitLab SAST reports to triage and recommend remediation for identified security vulnerabilities, in close collaboration with development teams to enhance codebase security.
  • Orchestrated policy configuration on production Palo Alto firewall to effectively implement and enforce zero-trust security model across company's applications and services.
  • Developed and maintained policies, guidelines, and standard operating procedures (SOPs) for the security team.
  • Facilitated information security risk management and conducted comprehensive information security design assessments and meticulous gap analysis for the organization.
  • Managed the Information Security Incident tracker to ensure risk treatment plans were up to date.
  • Developed application security training documentation and carried out training exercise for employees.
  • Managed access and asset inventory and conducted quarterly audit of employee access to ensure it is up to date.
  • Implemented Cloudflare Access, a feature in the Cloudflare platform, to enforce strict identity-based access controls for internal but publicly accessible web applications, ensuring that only authorized staff can access these resources.
  • Configured Sumo Logic's SIEM tool to seamlessly ingest intelligence from the company's AWS cloud and security infrastructure. Implemented automated alert mechanisms via Slack notifications, significantly enhancing incident response time and team coordination.
  • Administered and configured various tasks within Cloudflare to proactively mitigate a wide range of security threats and attacks.
  • Crafted comprehensive threat model documentation utilizing the STRIDE model to assess potential risks and vulnerabilities in planned features and applications. Enforced rigorous compliance with these models during the design phase, enhancing security measures.
  • Created a comprehensive cyber incident response playbook, focusing on the most probable security incidents. This documentation streamlines and simplifies the response process for efficient handling during security breaches.
  • Successfully managed, implemented, and audited IAM access and roles within the company, ensuring security policies are enforced and followed.
  • Conducted monthly audits and proactive remediation of the company's AWS infrastructure, leveraging AWS Access Analyzer, Security Hub services, and Tenable, to guarantee continuous regulatory compliance and optimal security posture.
  • Implemented Palo Alto Prisma Cloud to enhance and fortify the security of the company's cloud workloads.

Security Analysts

Union Bank Of Nigeria
Lagos, Nigeria
09.2018 - 04.2022
  • Carried out security reviews of new services to ensure that end products meet operational security requirements.
  • Successfully implemented 10 IPSEC site-to-site VPN connections with third parties to ensure secure and seamless data transfer.
  • Maintained and enforced firewall rules to achieve compliance and protect against potential cyber threats.
  • Applied rigorous policies and configurations to Palo-Alto and Check Point firewalls to enhance network security.
  • Collaborated with cross-functional teams to implement Cisco ACI, improving network traffic efficiency and data center security.
  • Designed and implemented a comprehensive defense-in-depth information security framework.
  • Onboarded multiple applications onto F5 load balancer to efficiently utilize server resources.
  • Integrated Palo Alto firewall within the Microsoft Azure environment to facilitate traffic segmentation.
  • Led the project for integrating extranet services at Union Bank DR, improving connectivity and security.
  • Ensured strict adherence to regulatory requirements such as the Payment Card Industry Data Security Standard (PCI DSS).
  • Managed the company's Bring Your Own Device (BYOD) program, overseeing device onboarding and conducting security checks using Cisco ISE.
  • Successfully executed a network optimization project for 305 branches, cash points, and offsite ATMs, enabling active-active connections over two WAN links, implementing IPsec, QoS, and IP segmentation.
  • Coordinated the establishment of local and wide area networks, providing robust infrastructure and data capacity for new applications and seamless communication among over 300 branches.

Network Engineering

SwiftTalk Limited
Lagos, Nigeria
01.2015 - 10.2018
  • Technically managed and supported 300 internet, LAN and WAN customers including financial institutions and government parastatals.
  • Provided complete end-to-end engineering and installation of route-based IP network solutions.
  • Integrated fixed wireless connectivity into facilities requiring high-speed networks.
  • Designed, implemented and supported MPLS networks.
  • Monitored network capacity and performance to diagnose and resolve complex network problems.
  • Receive complains from customers and log tickets to resolve their issues.

Education

Bachelor of Engineering - Electrical/Electronics And Computer Engineering

Delta State University, Nigeria
2014

Skills

  • AWS Cloud infrastructure
  • Cloudflare CDN and WAF
  • Palo Alto Firewall Administration
  • Endpoint Security
  • F5 Load Balancer Administration
  • Networking Protocol Expertise
  • Routing Protocol Expertise
  • Enterprise Network Implementation
  • Network Device Monitoring
  • Datacenter Infrastructure Implementations
  • Solarwinds Reporting
  • Sumo logic SEIM
  • Gitlab
  • Tenable
  • Terraform
  • Risk Assessment
  • Intrusion Detection System and Intrusion Prevention System (IDS/IPS)

Certification

  • CISSP in view (2023)
  • AWS Certified Security Specialty (2023)
  • AWS Certified Solutions Architect (2023)
  • Checkpoint Certified Security Expert (CCSE 2022)
  • Checkpoint Certified Security Associate (CCSA 2022)
  • COBIT5 Certified (2020)
  • Cisco Certified Network Associate (CCNA 2017)

Timeline

Security Analyst - Quidax Technologies
04.2022 - Current
Security Analysts - Union Bank Of Nigeria
09.2018 - 04.2022
Network Engineering - SwiftTalk Limited
01.2015 - 10.2018
Delta State University - Bachelor of Engineering, Electrical/Electronics And Computer Engineering
MATTHEW OSUGO