// Summary
Security Engineer with hands-on experience across healthcare, energy, and manufacturing environments.
Skilled in identity and access management, EDR monitoring, email security, and enterprise risk governance.
Proven track record reducing phishing attack surfaces, cutting malicious email volumes, and streamlining security
operations through automation. CEH, CompTIA Network+, A+, and AWS CP certified. Master of Science in
Information Security & Intelligence.
// Technical Skills
Microsoft Entra ID / Azure AD
Active Directory (Server 2019)
Microsoft 365 (Exchange, SharePoint, OneDrive)
Conditional Access
MFA / IAM
ESET Protect EDR
KnowBe4
Barracuda Email Gateway
VLAN Administration
Routing
Python Scripting
Automation
VirusTotal
AnyRun
Forensic Analysis
Network Troubleshooting
CAT 5e/6 Cabling
Risk Management / GRC
Security Awareness Training
Endpoint Deployment
Imaging
Quality Assessment
Audit Support
// Professional Experience
IT Security Engineer
Reed City Group — Reed City, MI
Jan 2025 → Present
- Cut phishing attack surfaces by 80% by deploying Microsoft Entra ID Conditional Access policies enforcing site-wide MFA, geolocking, session re-authentication, and third-party app restrictions
- Removed malicious email volume by 70–90% through administration of KnowBe4 Defend Email Threat and Barracuda Email Gateway Defense systems
- Automated AD–KnowBe4 user synchronization, reducing manual compliance tracking by 10+ hours per quarter
- Orchestrated simulated phishing campaigns tailored by department, training 250+ employees on real-world attack tactics and techniques
- Administered segregated Active Directory on Windows Server 2019 with role-based access controls aligned to Principle of Least Privilege
- Deployed and tuned ESET Protect EDR across endpoints for real-time threat detection, containment, and remediation
- Conducted forensic analysis of suspicious files and URLs using VirusTotal and AnyRun sandbox environments
- Managed Microsoft 365 suite (Exchange, SharePoint, OneDrive) for 250+ employees; troubleshot Exchange mail flow issues to maintain operational continuity
- Installed and terminated 2000+ feet of CAT 5e/6 cabling, wireless cameras, and switches; configured VLANs and routing rules to segregate network segments
- Partnered with Pathfinders IT Managed Service Provider on quarterly security audits, ensuring regulatory compliance and risk remediation
- Delivered daily technical support for endpoints, mobile devices, printers, network shares, and file access, sustaining employee productivity across the manufacturing floor
CX&T Security Intern — GRC Team
Consumers Energy — Jackson, MI
May 2024 → Jan 2025
- Drove transition of enterprise risk management systems, migrating ~5,000 IT and infrastructure risks with zero data integrity incidents
- Partnered with networking, systems, and application teams to identify and document risks during project planning, surfacing gaps before deployment
- Gained hands-on exposure to utility-scale IT environments supporting 24/7 uptime and strict regulatory standards
Senior Information Technology Extern
Hurley Medical Center — Flint, MI
May 2022 → Aug 2022
- Resolved 300+ IT service tickets in a high-availability healthcare environment, maintaining clinician uptime and minimizing disruption to patient care
- Imaged, configured, and deployed 20+ computers with full provisioning from OS installation through domain join and user handoff
- Mentored 2 incoming IT externs on ticket workflows, troubleshooting procedures, and IT best practices, accelerating their time-to-productivity
- Coordinated project deliverables across networking, systems administration, biomed, database management, and application analysis teams
- Presented project progress and operational updates to the IT team during regular meetings, ensuring stakeholder alignment
Information Technology Extern
Hurley Medical Center — Flint, MI
Jun 2021 → Aug 2021
- Delivered first-level support via Ticket+, resolving Wi-Fi connectivity, switch port, workstation, and hardware issues in a 24/7 healthcare environment
- Collaborated with cross-functional IT teams spanning networking, systems administration, biomed, database management, and application analysis
- Participated in quality assessment and continuous improvement initiatives, contributing to higher service-desk efficiency metrics
// Projects
VPS Security Hardening — Automated Server Lockdown
github.com/BenkoMatt/VPS-Security-Hardening-Report
- Performed end-to-end security hardening of a cloud VPS running an AI gateway and LLM stack, reducing the public attack surface to zero by restricting all services to a mesh VPN and disabling public SSH listeners
- Configured UFW firewall with deny-by-default posture and service-specific allow rules scoped exclusively to the VPN interface
- Hardened SSH via MaxAuthTries, idle timeouts, AllowUsers restrictions, and aggressive fail2ban progressive-ban policies
- Documented the full hardening lifecycle in a public security report including before/after port scans, service inventory, and rollback procedures
- Automated daily config backups via cron jobs with GitHub push, ensuring disaster recovery and change tracking
Cybersecurity Frameworks Guide
github.com/BenkoMatt/Claw-Framework-Report
- Authored a public reference guide covering NIST CSF, ISO 27001, CIS Controls, and MITRE ATT&CK, used by peers studying for security certifications
// Certifications, Licenses & Awards
EC-Council CEH
ECC4916837250
CompTIA Network+ ce
YS27STN64806HFSJ
CompTIA A+ ce
D72JQJ6YCME4QGCS
AWS Certified Cloud Practitioner
3a040b5349a3498686d2e38b5e66b9bc
FCC HA Technician
KF8ACL
American Red Cross Adult First Aid/CPR/AED
01L9OOG
Michigan CPL Holder — 1464863G
Zehnder's Employee of the Month (July 2023)
Ferris State University President's Scholarship
// Education
Master of Science — Information Security & Intelligence
Ferris State University — Big Rapids, MI
May 2026
Bachelor of Science — Information Security & Intelligence
Ferris State University — Big Rapids, MI
December 2024
Postgraduate Certificate: Business Intelligence / Incident Response / Information Systems Assurance, Strategy, & Governance
Minor: Artificial Intelligence & Penetration Testing