Information security/cybersecurity is still largely being discovered for organizations operating cloud natively and many ‘best practices’ aren’t keeping up with the pace at which organizations move in cloud environments. In this talk we’ll discuss some tips and tricks to increase your security posture in your cloud environments and how to best make use of the tooling provided. While the talk will focus mostly on AWS, the concepts apply across Azure and Google Cloud as well.

Topics that’ll we’ll discuss:

• Controls framework
• SAST for Infrastructure as Code
• Log Aggregation and Visualization
• Identity Governance and IAM
• Network controls and ‘Zero-Trust’ architecture.

Thanks to Gamma Force for providing the virtual meeting technology. Gamma Force helps organizations with technology and information security strategy.

Agenda

6:00 PM - Introductions, food, drink, and networking

6:30 PM - Speaker begins

Location

Online

Our Speaker

Matt is a cybersecurity practitioner focused in the areas of cloud security, application security, DevSecOps, and security operations. Currently, Matt works as a Cloud Security Engineer at Beam Dental located in Columbus, OH focused on securing Beam’s AWS and Google Cloud environments. Prior to working at Beam, Matt worked as a Penetration Tester for Ankura Consulting Group doing network, application, physical, and wireless penetration testing for a variety of clients across multiple verticals and countries. Before Ankura, Matt worked at various start-ups where his role was, broadly, focused on building security programs and solutions from the ground-up and discovering ways to improve security with shoestring budgets.

Throughout his professional career Matt also served in the Army National Guard with much of his career being a member of a National Guard Cyber Protection Team (CPT) in both Ohio and Georgia. As a member of the CPT, Matt was focused on incident response, endpoint and network monitoring, DevOps, and security automation. Additionally, Matt spent time in the Army Signal Corps focused on digital and radio tactical communications.

Matt is an avid member of the Columbus cybersecurity/infosec community serving as a board member for the Central Ohio ISSA, as the Director of Education, as well as being one of the organizers and founding board member of BSides Columbus.

Matt currently holds the following certifications: CISSP, OSCP, AWS Solutions Architect – Associate, GXPN, GPEN, and GWAPT.

About LOPSA

We're often seeking sponsors and speakers. Please contact us if you're interested in collaborating on this or future events. To keep up to date with future meeting information, please subscribe to the LOPSA Columbus mailing list.

Image by Gerd Altmann