Todd Gallant

Information Security Analyst

• Supported information security operations across AWS cloud infrastructure, endpoints, SaaS platforms, identity/access, and security tooling for a fully remote software organization.
• Monitored and investigated AWS GuardDuty and CloudTrail activity, security alerts, endpoint telemetry, vulnerability findings, and security dashboards to identify anomalous activity and potential threats.
• Performed security alert investigation and incident triage, gathering available telemetry and coordinating containment, remediation, and follow-up activities with Engineering and Infrastructure teams.
• Reviewed AWS security events and configurations across EC2, S3, CloudFront, ALB, CloudTrail, GuardDuty, and networking components.
• Worked with Engineering and Infrastructure teams on DevSecOps, application security, cloud security, vulnerability remediation, and security findings.
• Supported annual penetration testing, including coordination with external testing providers, review of findings, prioritization, and remediation tracking.
• Supported quarterly and annual PCI DSS security-control reviews and evidence collection, including identification and remediation of control gaps.
• Supported SOC 2 readiness by reviewing security policies, procedures, and controls against audit requirements and identifying deficiencies requiring remediation.
• Evaluated security products and third-party services against security, operational, compliance, and business requirements.
• Developed security monitoring automation and scripting using AWS CLI, PowerShell, and shell scripting to improve detection and reduce repetitive investigation tasks.
• Maintained security documentation, procedures, standards, and audit evidence supporting ongoing security operations and compliance.

System Administrator

• Administered IT infrastructure supporting a 100% remote workforce, including AWS cloud services, endpoints, SaaS applications, identity/access, and enterprise systems.
• Supported AWS infrastructure including EC2, S3, CloudTrail, GuardDuty, CloudFront, networking, and related services.
• Performed advanced troubleshooting and root-cause analysis across cloud, server, application, endpoint, and user environments.
• Managed endpoint security and Apple/macOS devices through Mosyle MDM, including configuration, security posture, software deployment, and remote management.
• Administered Google Workspace and SaaS platforms, including user provisioning, access, permissions, and security controls.
• Automated administrative and security operations using PowerShell, AWS CLI, and shell scripting.
• Worked directly with vendors and service providers to investigate technical/security issues, evaluate products, and implement remediation or new controls.
• Worked closely with developers and technical teams in Agile/Scrum and DevOps environments; created postmortems for downtime events.

Cloud Operations / Technical Support Tier II

• Supported globally distributed AWS-hosted infrastructure, applications, servers, databases, and customer environments across Canada, the United States, Ireland, and Germany.
• Investigated complex infrastructure and application issues using monitoring, logs, system telemetry, and root-cause analysis techniques.
• Implemented and maintained Datadog monitoring and investigated system/application events across distributed environments.
• Supported deployments, system changes, operational troubleshooting, and DevOps activities in cloud-hosted environments.
• Supported internationally distributed infrastructure with European data-residency requirements, including European customer data hosted in Ireland.