Javier T. Menius
Cybersecurity Engineer, Regional carriers
Pittsburgh, PA · (412) 555 0118 · name@example.com · linkedin.com/in/javiertmenius
Key Qualifications
EXPERIENCE
Seven years in network and telecommunications security engineering
INDUSTRIES
Regional carriers, internet service providers, data center interconnection
SPECIALTIES
Border gateway protocol security, distributed denial of service mitigation, firewall architecture, network segmentation
SYSTEMS
Cisco, Juniper, SolarWinds, Splunk, ServiceNow
CREDENTIALS
Certified Information Systems Security Professional; Cisco Certified Network Professional Security
EDUCATION
Bachelor of Science in computer engineering, University of Pittsburgh
Results at a Glance
41
Peering sessions
600
Routers and switches
96%
High severity findings
Executive Summary
Cybersecurity engineer protecting the backbone and peering edge of a regional carrier carrying 4.2 terabits a second. Seven years on network security, most of it spent hardening border gateway protocol sessions and absorbing volumetric attacks without customers noticing. Comfortable on Cisco and Juniper equipment at three in the morning.
Signature Achievements
- Deployed route origin validation across 41 peering sessions and eliminated the route leaks that had caused three outages the previous year.
- Cut the time to mitigate volumetric attacks from eleven minutes to under ninety seconds using automated flow based detection.
- Rebuilt the management plane access model for 600 routers and switches, removing 214 shared local accounts.
- Segmented the network operations center environment from corporate systems, which contained a phishing incident to nine workstations.
- Closed 96 percent of high severity findings from the annual penetration test inside one quarter.
Professional Experience
Cybersecurity Engineer
Allegheny Trunk Networks, Pittsburgh, PA 2021 to present
Backbone and peering security for a carrier with 600 network devices across Pennsylvania, Ohio and West Virginia
- Designs and maintains edge filtering, route validation and attack mitigation for the peering and transit edge.
- Reviews every change to production access control lists before the change advisory board approves it.
- Runs quarterly attack simulations with the network operations center and writes the findings up for engineering leadership.
- Serves as the security engineer on call in a rotation of four.
Network Security Analyst
Steelworks Data Exchange, Youngstown, OH 2019 to 2021
Security team of five inside a carrier neutral interconnection provider
- Monitored flow data and firewall logs and triaged alerts for customer facing infrastructure.
- Built the first asset inventory tying every public address to an owning team.
- Wrote the runbook still used for suspected compromise of a customer facing router.
Licensure and Certification
Certified Information Systems Security Professional
Cisco Certified Network Professional Security
Education
Bachelor of Science in computer engineering, University of Pittsburgh, 2019
Core Skills
Border gateway protocol security · Distributed denial of service mitigation · Firewall architecture · Network segmentation · Splunk · Juniper · Flow analysis · Incident response · Access control review