Marilyn Almeida
About
Detail
Application & Cloud Security Engineer | Integrating Security into CI/CD & Cloud Environments | Compliance, SAST/DAST, Incident Response
Long Beach, California, United States
Résumé
Jobs
verified_user
0% verified
Application & Cloud Security EngineerCapital OneAug 2025 - Current (1 year 1 month)• Reduced misconfigurations 50% by embedding Terraform and CloudFormation checks into CI/CD pipelines, preventing insecure AWS and Azure deployments from reaching production. • Lowered privileged access exposure 40% by restructuring IAM and RBAC policies, enforcing least-privilege access across sensitive workloads. • Improved fraud detection and incident response 30% by correlating Splunk, CloudTrail, and KMS logs for real-time analysis. • Automated vulnerability scans in CI/CD pipelines, cutting manual review effort 25% and accelerating secure release cycles. • Strengthened encryption by enforcing AWS KMS and Azure Key Vault across critical data assets, ensuring PCI DSS compliance. • Reduced configuration drift 20% by securing infrastructu- Cloud Security EngineerCircleMay 2024 - Dec 2024 (8 months)• Built automation scripts to compare AWS and GCP resources, increasing efficiency 30% and reducing manual verification time. • Developed Tag Audit reports to define ownership and criticality of assets, improving data accuracy 25% across multi-cloud environments. • Implemented Kubernetes admission controllers with Rego rules, enforcing security policies and preventing misconfigurations in production clusters. • Established automated IaC scanning in CI/CD pipelines with pre-commit hooks, reducing compliance violations 15% across deployments. • Integrated Wiz with cloud platforms to enhance security posture management and streamline remediation workflows. • Partnered with engineers to resolve findings faster, reducing mean time to resolution
- Application & Cloud Security EngineerHexaware TechnologiesSep 2021 - Aug 2023 (2 years)• Resolved 500+ critical vulnerabilities using SAST and DAST scans with SonarQube and Veracode, lowering post-release incidents. • Centralized logging with CloudTrail and Azure Security Center, improving HIPAA and GDPR compliance reporting and cutting audit findings by 30%. • Delivered OWASP secure coding workshops to 100+ engineers, reducing code review defects 25% across applications. • Integrated API security testing into development workflows, identifying risks earlier and preventing production exploits. • Conducted risk assessments and prioritized remediation tasks, reducing enterprise risk scores 30%. • Accelerated investigations by analyzing security logs during incidents, enabling faster root-cause identification and recovery. • Aut
Education
verified_user
0% verified
- Master of Science - MS, Cyber SecurityCalifornia State UniversityDominguez HillsJan 2023 - Dec 2025 (3 years)
- Bachelor of Engineering - BE, Computer EngineeringFr Conceicao Rodrigues College of EngineeringJan 2019 - Dec 2023 (5 years)
Projects (professional or personal)
verified_user
0% verified
- IIntelligent Threat Detection with Suricata and Machine LearningMar 2025 - May 2025 (3 months)- Developed a Suricata-based IDS integrated with the ELK stack, enabling real-time analysis and visualization. - Implemented machine learning model, Isolation Forest to enhance anomaly detection, increase accuracy by 20%. - Engineered a scalable, open-source security lab environment demonstrating enterprise-ready threat monitoring capabilities.
- CCI/CD Pipeline and Cloud IntegrationJan 2024 - Mar 2024 (3 months)- Developed an advanced continuous integration/continuous delivery pipeline using Jenkins, automating builds based on GitHub updates and improving team communication with Slack notifications. - JaCoCo and SonarQube were integrated for better code quality and maintainability. - Improved deployment with AWS ECS and Docker, achieving a 30% increase in scalability and reliability for cloud deployments.
- SSentiment Analysis using BERTSep 2022 - Nov 2022 (3 months)- Headed the creation of a dynamic website that harnessed the power of BERT and Python to perform sentiment analysis on over 10,000 user reviews, resulting in a 25% increase in customer satisfaction. - Translated text data into actionable insights for informed decision-making. - Enhanced analysis workflows, achieving real-time scalability & efficiency, reducing sentiment analysis time by 30%
- BBulk Emailer with Email Tracking and Spam FilteringJun 2022 - May 2023 (1 year)- Led the end-to-end development of a Bulk Emailer application, empowering users to create custom email templates. - Integrated email tracking & spam detection functionalities, resulting in a 20% increase in email delivery success rates. - Pioneered the implementation of an email warm-up system, leading to a 15% enhancement in email deliverability & optimized email marketing campaigns.
- EEd LearnJul 2021 - May 2022 (11 months)- Pioneered the development of an E-Learning platform, providing educators with a dynamic resource-sharing hub that led to a remarkable 40% surge in student engagement. - Orchestrated the development of the backend infrastructure, featuring a secure login page and video upload section. - Successfully implemented discussion forums and one-on-one chat functionalities, fostering collaborative learning and direct teacher-student interaction, leading to a 25% boost in student participation.
- UUnity Based VR Project for E- LearningJul 2020 - May 2021 (11 months)- Developed a virtual reality environment using Unity addressing three different problem statements within the VR environment and facilitating a 25% improvement in students' comprehension of complex concepts. - Took the lead in creating an immersive solar system environment. - Designed it to help students visualize and understand the operations of celestial bodies in our solar system.