David O'Neal

• Independent GRC engineering work: completed a ten-project compliance automation curriculum in my own AWS lab account and earned CGE-AUD.
• Shipped an end-to-end compliance automation pipeline (Terraform, OPA/Rego, GitHub Actions, Cosign, OSCAL) mapped to NIST 800-53 controls SC-28, AC-3, CM-6, and AU-3, with 6 of 6 policy tests passing and a merged pull request plus a blocked pull request in the history.
• Project 11, an audit readiness pipeline from chapter 9 of the curriculum, is underway. The Certified GRC Engineer Practitioner course (CGE-P) is in progress. ISO 27001 Lead Auditor is in progress.

• Led security service delivery for 10+ enterprise client accounts, coordinating across SOC analysts, engineers, and channel partners to keep projects on track.
• Built and managed onboarding workflows in GuideCX with milestone tracking that got new clients up and running faster.
• Wrote Quarterly Business Reviews (QBRs) and delivery updates translating technical security work into plain language for client leadership.
• Designed the connector setup workflow for Mave so engineers had a documented, repeatable process for configuring client integrations.

Rehired into this role after a company-wide reduction in force ended the Cybersecurity Consultant position below. Two months between roles.

• Designed and led patch and vulnerability management programs for aerospace and industrial clients across 279+ endpoints, prioritizing CVEs by risk level and business impact.
• Used Tenable.io, Nessus, and PDQ Connect to cut critical vulnerability remediation from several weeks to under 72 hours, more than 80% faster.
• Built a Patching-as-a-Service delivery framework that standardized remediation across client environments and reduced manual coordination effort.
• Authored patching SOPs, risk classifications, and remediation documentation to strengthen governance and audit readiness.

• Maintained patch compliance above 95% across 500+ endpoints with PDQ Connect, through automated deployment and consistent remediation tracking.
• Handled IAM for the department, including provisioning, deprovisioning, MFA resets, and access reviews in Active Directory and Azure AD.
• Built vulnerability dashboards and KPI reports that gave IT leadership a clear picture of current risk.

Position eliminated due to state budget reallocation.

• Investigated and resolved 30+ phishing, malware, BEC, and DLP incidents per week in a financial-sector SOC, completing phishing investigations in under 20 minutes while maintaining SLAs and documenting findings for audit.
• Reduced phishing false-positive alerts by 40% through detection rule tuning across Proofpoint, Microsoft Defender, and Cisco SEG.
• Wrote DLP response SOPs that standardized how the team handled incidents and kept everything traceable.
• Worked with the security awareness team on phishing simulations and reporting habits. Phishing incidents dropped 40% over the same period.

• Provided 24/7 enterprise systems monitoring using Splunk, and used PDQ Deploy for patch deployment, responding in real time to service disruptions and supporting incident root cause analysis.
• Maintained operational playbooks and documentation to support audit compliance and SLA consistency.
• Coordinated with global support teams.