Marcus Delray

Profile

Senior Security Engineer with 9 years hardening cloud and on-premises infrastructure across fintech and SaaS environments. Specializes in threat detection engineering, zero-trust architecture, and incident response automation. Reduced mean time to detect (MTTD) by 61% at current employer and led a SOC 2 Type II audit that closed 34 findings in under 90 days.

Work Experience

Senior Security EngineerMar 2021 - Present

Vantrel Financial Technologies, Austin, TX

Architected a cloud-native SIEM pipeline on AWS using Splunk and Lambda that ingested 4.2 TB of daily log data, cutting MTTD from 48 hours to 18 hours across 6 production environments.
Led a zero-trust network segmentation project covering 1,400 endpoints, eliminating lateral movement paths exploited in a prior breach and reducing attack surface by an estimated 73%.
Built and maintained 120+ detection rules in Splunk SIEM aligned to MITRE ATT&CK, achieving a false-positive rate below 4% and freeing analysts from ~22 hours of weekly alert triage.

Security Engineer IIJun 2018 - Feb 2021

Orbis Cloud Solutions, Denver, CO

Automated vulnerability remediation workflows using Python and Jira APIs, reducing average patch cycle from 21 days to 6 days across 300+ AWS EC2 instances and cutting critical CVE exposure by 58%.
Designed and executed a purple-team exercise simulating APT tactics that exposed 11 previously undetected gaps in endpoint detection; remediation hardened EDR coverage to 99.4% of the fleet.
Deployed HashiCorp Vault for secrets management, retiring 3 legacy credential stores and eliminating 47 hardcoded secrets found during a codebase audit of 18 microservices.

Security Engineer IAug 2015 - May 2018

Nexbridge IT Services, Dallas, TX

Conducted 40+ penetration tests against web applications and internal networks using Burp Suite and Metasploit, delivering remediation reports that resolved an average of 14 critical findings per engagement.
Implemented CIS Benchmark hardening across Windows Server and RHEL environments for 8 enterprise clients, bringing average CIS compliance scores from 51% to 89%.
Assisted in achieving PCI DSS 3.2 compliance for 3 client environments, coordinating with QSA auditors and closing 26 control gaps within a 60-day remediation window.

Skills

CISSP (Certified, 2020) · Splunk SIEM & SPL · AWS Security (GuardDuty, Security Hub, IAM) · MITRE ATT&CK Framework · Penetration Testing (Burp Suite, Metasploit) · Python scripting for security automation · Zero-Trust Architecture · Vulnerability Management (Tenable Nessus, Qualys) · Incident Response & Digital Forensics

Profile

Work Experience

Education

Skills

Links