William Castro

About

male sitting

I am passionate about cloud, cybersecurity, and information security, and derive immense satisfaction from developing, creating, and contributing to solutions that can positively impact organizations and the individuals they support. I am confident in my ability to make a significant and lasting impact as a valued member of any team with my strengths in strong communication, time management, cloud security, leadership, and collaboration, .

CERTIFICATIONS

  • CompTIA Security+ | AWS Cloud Practitioner | AWS Solutions Architect | AWS SysOps Administrator | Microsoft AZ-900 | Google Cybersecurity Professional | OCI Foundations Associate

TECHNICAL SKILLS

  • Azure | GCP | Amazon Web Services (IAM, Workspaces, AppStream 2.0, Managed Microsoft AD, Active Directory, Route 53, CloudFront, ACM and Well Architecture Framework) | Cloud Architecture & Design Optimization | Cloud Management | CI/CD

TOOLS

  • Kali | Linux/Windows| PowerShell/CLI/Bash | Metasploit/Rapid7 | Wireshark | VMware/VirtualBox | IDS/IPS | SIEM | NIST RFM/CSF| FedRAMP | TCP/IP| MySQL | VS Code | GitLab/Hub | M365 | Docker | ElasticSearch | Icinga

Resume

Education

B.S., Information Technology, Information Security

George Mason University, VA

A.S., Information Technology

Northern Virginia Community College, VA

Professional Experience

General Dynamics Information Technology

Systems Engineer | July 2023 – Present
  • Acquired proficiency in DevSecOps practices on the AWS platform, including essential services like KMS, S3, RDS, EC2, Lambda, SQS, SNS, Redis, and CloudFormation, to support secure and efficient operations
  • Implemented routine checks on managed systems, leading to increased incident response efficiency by promptly addressing generated alerts
  • Provided off-hours support to ensure continuous monitoring and timely resolution of security incidents
  • Drafted comprehensive technical documentation to facilitate knowledge transfer and support existing team members, thereby enhancing on-boarding processes for new members
  • Developed a comprehensive project plan reducing infrastructure costs by 80% while spearheading infrastructure enhancements to automate cross-environment scanning to monitor, investigate, and mitigate vulnerabilities improving overall security posture
  • Facilitated database vulnerability scans to address findings in AWS RDS instances, contributing to the maintenance of secure database environments in the cloud infrastructure
  • Executed A&A procedures and managed POAMs for cloud-based information systems ensuring compliance with Cybersecurity standards and fortifying system integrity and resilience
  • Demonstrated experience utilizing DevSecOps tools, such as GitHub/Lab and Jenkins to enable CI/CD
  • Identified, analyzed, and resolved front-end/back-end infrastructure vulnerabilities, application deployment issues, and regularly make recommendations for improvement and cost efficiencies
  • Planned, designed, tested, integrated, and deployed technical solutions to address complex challenges effectively
Software Engineer Associate | June 2021 – August 2022
  • Created and implemented a strategic plan for cloud migration, driving down infrastructure costs by 20%, and enabling straightforward operating procedures for administrators (Windows, AWS/AZ/GCP, VM, Project Planning)
  • Successfully launched zero and thin-client (Workspaces/Appstream2.0) user desktops on AWS, reducing human interaction through automatic account creation using infrastructure as code (Terraform/Python/AWS)
  • Leveraged familiarity with cloud governance frameworks (FedRAMP/CMMC), policies, and procedures to ensure compliance, risk management, and operational efficiency in cloud environments
  • Demonstrated knowledge and understanding of cloud security best practices, including secure architecture design, identity and access management, and data protection
  • Conducted extensive research and developed comprehensive guidelines to optimize the successful launch of a platform. Translated data into visually appealing formats using Tableau, enabling stakeholders to effectively comprehend strategies for nurturing sustainable long-term business expansion within GDIT
Research and Development Intern Coordinator | January 2022 – May 2022
  • Coordinated and directed 12-person intern team, leading implementations of critical project features and reducing time to deployment from 14 weeks to 11 weeks
  • Facilitated seamless communication and collaboration between project manager and intern team, allowing for rapid escalation of issues if required, and greatly decreasing team blockers
  • Utilized customer and user feedback to develop key performance indicators, enabling teams to measure project success objectively and driving future innovation and improvements
  • Demonstrated strong problem-solving skills by identifying and resolving project-related issues, ensuring smooth project execution and minimizing disruptions
The World Bank Group | HQCC Watch Officer | March 2019 – September 2021
  • Led incident response teams, providing direction and guidance to effectively mitigate security incidents and ensure the safety of personnel and assets
  • Utilized security systems and threat intelligence platforms to monitor and detect potential threats, promptly responding to security incidents
  • Optimized incident response and service request procedures by implementing automated templates and triggers, resulting in enhanced operational efficiency and effectiveness
  • Maintained comprehensive incident logs, documenting security breaches, equipment malfunctions, and other incidents. Identified areas for improvement in existing procedures and protocols
  • Received incoming requests for emergency and non-emergency assistance (24/7) and determines the type of service(s) required and initiates calls for service in accordance with SOP

Projects

cloud architecture

Cloud Resume Challenge

security audit

Botium Toys Risk Assesment

linux commands

File permissions in Linux

Launching EC2

Launching EC2

Applying filters to SQL queries

Applying filters to SQL queries

DevOps Learning with Terraform

DevOps Learning with Terraform