Jonathan Shufelt

Background

About Jonathan Shufelt

Accomplished, pragmatic senior cyber security engineer with a hacker mindset and a consistent track record of leading technical teams to proactively think outside of the box, make unknowns known, drive innovation, and solve hard problems. Hands-on with a rare, comprehensive skillset for coding from the kernel to the application layer, building & configuring networks, and rigorously mapping physical controls to security & privacy frameworks. KEY QUALIFICATIONS: RESILIENT PROJECT LEAD & SME Adept at advising technical, policy, and leadership stakeholders on strategies for risk mitigation — developing practical solutions, presenting project roadmaps, and leading agile teams to ensure that the high-level vision is met. CRISIS/THREAT MITIGATION MANAGER History of delivering successful outcomes — thinking like an attacker to minimize attack surfaces and mitigate threats. PASSIONATE TECHNICAL LEADER & ADVISOR Thrives at leading and mentoring teams of technical professionals — empowering them to think critically, challenge conventions, make the complex simple, and reliably produce results. RIGOROUS TROUBLESHOOTER Highly adept at analyzing vulnerabilities from every angle — performing root cause analysis to introduce targeted adjustments and solve mission-critical problems. PROACTIVE HANDS-ON CONTRIBUTOR Natural ability to navigate new or changing environments, complex situations, and the adoption of new technologies using grit, diplomacy and sound judgment. TECHNICAL DOMAIN: LANGUAGES Python • C • Java ARCHITECTURES & OPERATING SYSTEMS Red Hat • Ubuntu • x86 • x64 • ARM • MIPS • Android TOOLS Visual Studio Code • GDB • Git • JFrog • Atlassian Suite • Kali Linux • IDA Pro • Binary Ninja • Ghidra • GDB • Command Line Tools • Ansible • GNU Radio • Wireshark METHODOLOGIES Software Design Patterns • SAFe Agile AREAS OF EXPERTISE: CYBER SECURITY ENGINEERING Requirements Mapping • Model-Based Systems Engineering • Data Life Cycle Management • Systems Architecture, Deployment, and Maintenance • SDLC Management • Reverse Engineering • Fuzzing • Penetration Testing • Exploit Development • Threat Hunting • Vulnerability Management • Quality Assurance COMPLIANCE Framework Implementation • OS Hardening • Policy Creation & Implementation • Identity & Access Management • Security Auditing • Security Verification & Patching • Standards Testing • Systems Engineering & Maintenance CROSS-FUNCTIONAL LEADERSHIP Agile Project Management • Building/Leading High-Performing Teams • Training & Mentoring Talent • Navigating Government Agencies & Complex Organizations