Joseph McMahon

Information Security & Compliance Architect

ScienceLogic

Jul 2025 - Current (1 year 2 months)

I lead the thoughtful, cost-effective, and pragmatic evaluation, selection, and implementation of organizational information security controls to measurably reduce risk and maintain our compliance obligations. - Defensive security team lead for infrastructure and enterprise security. - Led a companywide initiative to review, recommend, and replace security tooling on a cost and functionality basis. - Provides technical information security and compliance best practices and hands-on guidance to a wide range of departments and organizational audiences. - Supports technical alignment to maintain product adherence with FedRAMP, SOC2, ISO 27001, and NIST control frameworks. - Sets technical direction, mentoring, and implementation guidance for

Staff Security Engineer, Cyber Architecture and Resiliency

MITRE

Feb 2025 - Jun 2025 (5 months)

Although my time at MITRE was brief due to a layoff, I am grateful for the opportunity to have contributed to cutting-edge AI research and updated definitions for the MITRE ATT&CK framework. - Trusted advisor to the sponsor (IRS) influencing the strategy and architecture of their cybersecurity initiatives. - Performed in-depth technical research to support and explore novel uses of artificial intelligence and large language models to facilitate offensive and defensive cybersecurity activities. - Researched new tactic and technique definitions for the MITRE ATT&CK framework to reflect the changing adversarial landscape, with a particular focus on AI and LLM-augmented penetration testing.

Senior Enterprise Security Engineer

Arcadia

Jul 2024 - Jan 2025 (7 months)

- Guided the strategic direction and led technical implementation of the enterprise security program. - Managed functional areas of endpoint detection and response (EDR), email security, workforce identity and access management (IAM), vulnerability management, and zero trust. - Took ownership of employee lifecycle management from hiring through onboarding plan, career development, 30/60/90 goal development, and follow up for junior staff. - Managed and executed project to migrate over 1400 users and contractors off a legacy VPN to a zero-trust network access solution fully integrated with IdP and EDR with zero disruption. - Onboarded and managed Crowdstrike endpoint detection and response (EDR) solution for over 1200 macOS and Windows endp

Security Engineer III

Arcadia

May 2022 - Jun 2024 (2 years 2 months)

Senior Network Analyst

Arlington Public Schools

Jun 2017 - May 2022 (5 years)

- Facilitated migration of entirely on-premises environment to Azure hybrid cloud model required by operational challenges presented by the COVID-19 pandemic. - Led a project to appropriate a $100,000 grant from Amazon to design, build, and operate a next-generation STEM lab for networking, cybersecurity, and STEM learning. - Publicly recognized by Arlington County Board for collaboration and contributions to Arlington County fiber network. - Migrated over 30 Juniper network configurations to infrastructure-as-code (IaC) using Ansible. Architected and maintained complex, multi-datacenter hybrid cloud Palo Alto NGFW environment. - Mitigated distributed denial of service attacks (DDoS) from malicious state-sponsored actors. - Migrated from a

Network Security Engineer

Carbonite

Nov 2015 - Jun 2017 (1 year 8 months)

IT Manager

Apex Clean Energy

Dec 2014 - Nov 2015 (1 year)

Unironically called the CIO of a 120 person company multiple times at 28 years of age.

Network Engineer

Carbonite

Aug 2011 - Dec 2014 (3 years 5 months)

Escalations Lead, Mac Product Support

Carbonite

Mar 2010 - Aug 2011 (1 year 6 months)

About

Detail

Timeline

Résumé