Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Kevin Gladden

Virginia Beach

Summary

Highly skilled and experienced Senior Security and Systems Engineer with a strong background in designing, implementing, managing, and troubleshooting complex security systems and network infrastructures. Proven ability to safeguard information assets, mitigate risks, and detect and respond to security incidents. Known for developing and implementing robust security strategies that align with industry best practices and compliance standards. Adept at leading cross-functional teams, providing technical guidance, and fostering a culture of security awareness. Seeking to leverage expertise in cybersecurity and systems engineering to support and enhance organizational security posture.

Overview

15
15
years of professional experience
1
1
Certification

Work History

Agency Engineer

Mantech
04.2023 - Current
  • Leading a team in the development and integration of the Axonius solution into the Department of Education networks.
  • Responsible for the maintenance, configuration, development, testing, and integration of the Axonius solution within Mantech test and development labs.
  • Serving as a key liaison between the engineering teams and leadership, translating management and customer requirements into actionable security solutions.
  • Supporting identity and access management (IAM) initiatives, ensuring alignment with security compliance requirements.
  • Integrated Single Sign-On (SSO) authentication via LDAP to enhance identity management and access control security.

Systems Development Engineer

Amazon Web Services
11.2021 - 02.2023
  • Senior Systems Development Engineer in a DevOps team for AWS Metering and Billing Computation, ensuring infrastructure parity across multiple regions worldwide and timely resolution of internal billing data-related customer queries.
  • Identified and developed solutions for automation opportunities, primarily utilizing RHEL7 as the primary operating system.
  • Led a team of 4 in a major upgrade and overhaul of a large public sector customer's internal billing infrastructure to modernize classified region's billing services.
  • Managed a team of 14 for two automation projects, resulting in the creation of internal tools for customer service departments and automatic deployment of flexible clusters with the latest AL2 AMI using Python and Java.
  • Maintained the internal team codebase using Git, AWS Pipelines, AWS Code, AWS CLI, and other tools.

Technical Security Engineer

Broadcom Inc
05.2018 - 10.2021
  • Technical Security Engineer for the United States Navy Next Generation Enterprise Network (NGEN), providing operational recommendations for infrastructure events and assisting clients with Symantec product installations, updates, and integrations.
  • Transformed key daily, weekly, and annual processes from manual to automated using PowerShell scripting, saving over 100 manhours annually.
  • Automated the proprietary internal security certificate renewal process using .NET and PowerShell 5.1, saving 30 hours annually.
  • Developed a proof of concept for SSL Visibility on Department of the Navy networks, enabling analysis, scanning, and caching of SSL encrypted data on ProxySG and Content Analysis appliances.
  • Assisted lead engineers in the deployment of Splunk on the unclassified network and maintained over 25,000 Symantec Endpoint Encryption clients.
  • Led a team of 2 in major version upgrades for Symantec Endpoint Protection, ProxySG, and CAS servers across 7 sites, improving the security posture of classified and unclassified DoN networks.
  • Integrated PKI encryption system with Symantec Endpoint Protection Manager and Symantec ProxySG, enabling 2FA for all authorized administrators.
  • Debugged and transcribed legacy Visual Basic utility scripts into PowerShell 5.1, managing various Symantec solutions.

Website Vulnerability Analyst

U.S. Navy
02.2016 - 05.2018
  • Led a team of 7 in conducting penetration testing and analysis on Department of the Navy-owned web assets, generating and analyzing vulnerability reports and assisting in remediation based on NIST 800-218 and OWASP top 10 standards.
  • Administered team's SQL databases and virtual machines, including deployment, configuration, and management of Microsoft SQL, MySQL databases, and various virtualized operating systems.
  • Engineered and developed custom Python and PowerShell solutions to bypass weaknesses in primary testing software, reducing false-negatives and time-to-completion.
  • Served as the lead test and evaluation engineer for prospective tools, including Nexpose and Qadium (now Palo Alto Cortex Expanse) evaluations for Department of the Navy utilization.

Blue Team Network Security Analyst

U.S. Navy
12.2014 - 02.2016
  • Participated in the DoN Cyber Security Inspection Compliance Program (CSICP), providing Fleet ITs with knowledge of tools and procedures for maintaining network compliance in accordance with DoN instruction.
  • Trained and remediated identified units with vulnerabilities listed within NIST 800-53.
  • Conducted 15 CSICP inspections across 9 different afloat and shore platforms, identifying and remediating over 5,000 vulnerabilities.

Information Systems Technician

U.S. Navy
05.2010 - 12.2014
  • Administered gateway routers, maintaining an Access Control List of over 16,000 inbound and outbound addresses.
  • Ensured systems compliance with the latest best practices and Security Technical Implementation Guides (STIGs) while conducting daily and weekly backups for maximum uptime and reliability.
  • Maintained over 60 digital and analog circuits, including HF, VHF, UHF, SHF, and EHF radio frequencies, ensuring reliable communication channels.
  • Operated and administratively controlled over 50 communication cryptography devices, both analog and digital (voice and data).

Education

Bachelors of Science - Computer Networking and Cybersecurity

University of Maryland Global Campus
Adelphi, MD
12-2020

Skills

  • Security Automation & Scripting (Python, PowerShell)
  • Security Frameworks (NIST, FedRAMP, ISO 27001)
  • Security Audits & Compliance
  • Incident Response & Risk Management

Certification

CISSP (ISC)2 Jan 2019 - 01 Feb 2028


Symantec ProxySG 6.1 Broadcom June 2019

Timeline

Agency Engineer

Mantech
04.2023 - Current

Systems Development Engineer

Amazon Web Services
11.2021 - 02.2023

Technical Security Engineer

Broadcom Inc
05.2018 - 10.2021

Website Vulnerability Analyst

U.S. Navy
02.2016 - 05.2018

Blue Team Network Security Analyst

U.S. Navy
12.2014 - 02.2016

Information Systems Technician

U.S. Navy
05.2010 - 12.2014

CISSP (ISC)2 Jan 2019 - 01 Feb 2028


Symantec ProxySG 6.1 Broadcom June 2019

Bachelors of Science - Computer Networking and Cybersecurity

University of Maryland Global Campus
Kevin Gladden