Tiffany Bass

Versatile Cyber Security Engineer with experience throughout multiple roles within the DevSecOps field driving cross-functional collaboration with team members of varying backgrounds, experience levels, and core responsibilities to implement best practices, harden internal systems, and improve overall security posture within an organization.

As a passionate advocate for cybersecurity and a proud Black woman in the field, I am committed to breaking barriers and driving change. My passion for the intricacies of cyber security and technology's ever-growing implementation has enabled me to minimize risks for clients and companies. With a track record of showing initiative and dependability, I have successfully assessed and resolved urgent solution and system vulnerabilities and events in order to prevent irreversible system breaches that could otherwise impact an organization's key processes or expose sensitive business, employee, or customer information to malicious actors.

Notable Cyber Security Impacts
🔒Vulnerability Assessment & Management: Actively research and investigate emerging threats on business critical systems in order to mitigate or resolve the risk of potential breaches following industry standard practices and compliance (ISO 27001).
🔒Strategic Organization: Proven ability to design and lead security related projects and initiatives with keen attention to detail in identifying relevant technical and human resources and clearly outlining the responsibilities of each party to achieve organizational goals and assist in overall business growth.
🔒Cross Department Communication: Leverage strong organizational and communication skills in demonstrating and teaching colleagues how to access and navigate systems securely and efficiently with best practices regarding both shared and personal credentials, devices, and other potential attack vectors.

Cyber Security Areas of Expertise
💻 Ability to quickly learn and consistently apply new techniques and technologies to improve compliance metrics.
💻 Support for Network / Security Operations Center teams through in-depth documentation of standard methods of procedure, direct training, or on the fly incident remediation.
💻 Leverage scripting, automation, and Infrastructure as Code to push urgent system remediations across business critical devices as quickly and efficiently as possible.

Tools:
Crowdstrike EDR
*   Nessus Vulnerability Scanner
*   Alienvault SIEM / IDS
*   Python
*   Linux / Windows / Mac OS

Experience in:
📈Project Management
📈Training & Development
📈Data Analysis
 

Pricewaterhouse Coopers Risk Management Intern
❖ Conducted thorough security assessments on company systems and networks, identifying vulnerabilities and recommending mitigation strategies,
contributing to a 20% reduction in potential cyber threats. Prepared detailed incident response plans.
❖ Participated in vulnerability scanning exercises, evaluating potential impacts and likelihood of security risks to prioritize remediation efforts.
Acquired proficiency in Alteryx and Tableau, enabling efficient data manipulation and visualization.
The Pennsylvania State University University Park, PA
Resident Assistant Aug 2020 – May 2022
❖ Fostered a supportive and inclusive residential community by organizing and leading engaging social events, resulting in a 15% increase in resident
participation.
❖ Employed data analysis techniques to identify trends and optimize processes, leading to improvements in student satisfaction and operational
efficiency
DREEAMS | College Enrichment Program Philadelphia, PA
Enrichment Intern June 2019 – Aug 2019 ❖ Strategically tailored the curriculum to elevate students' foundational Math and ELA skills, fostering critical thinking and analytical abilities crucial
for problem-solving in the dynamic field of cyber security.

The Pennsylvania State University | College of Information Sciences and Technology
Master of Science in Informatics
Bachelor of Science in Security Risk and Analysis Minor in Information Science and Technology