About
Sofia Wagner
Senior Cybersecurity Engineer and Architect with 10+ years of expertise in network and cloud security, SIEM engineering, XDR/EDR, and incident response. Skilled in privileged access management, Zero Trust, and vulnerability reduction. Recognized for designing scalable security architectures and aligning enterprise controls with PCI DSS, GDPR, and NIST frameworks.
Experience
Cybersecurity Advisor
- Architected secure network segmentation by implementing advanced firewalls, IAM policies, and endpoint protection to meet PCI DSS, CP, GDPR, and other regulatory standards for high-security environments.
- Designed and validated hybrid security architectures with cross-regional teams to maintain a consistent security baseline and strengthen endpoint, network, and cloud defense-in-depth.
- Led vulnerability and exposure management for 300+ applications, conducting risk assessments, threat modeling, and architecture reviews that reduced critical findings by 45%.
- Supported secure cloud migrations by implementing encryption standards, identity governance and access controls to protect sensitive data and maintain compliance.
Security Engineer
- Conducted proactive threat hunting focused on APT detection by correlating IOCs, behavioral analytics, and threat intelligence across SIEM and EDR platforms.
- Led and architected the implementation of Symantec CASB and DLP across a 35,000-user hospital network to prevent data loss, insider threats, and data breaches reducing data-related incidents by approximately 40% enterprise-wide.
- Implemented scalable security architectures with next-generation firewalls, segmentation, VPN, and IDS/IPS to enhance remote access and reduce external threat exposure.
- Improved enterprise email security posture via behavioral analysis, secure gateways, phishing simulations, and automated quarantine and sandboxing.
Network Security Engineer
- Engineered and maintained firewall solutions for high-availability financial networks, ensuring continuous protection of critical data.
- Collaborated with cross-functional teams to design and implement secure network architectures, focusing on scalability and security best practices.
- Utilized Splunk for log analysis and threat detection, creating dashboards and alerts that improved monitoring and response capabilities.
- Provided technical expertise in the configuration and management of VPNs, securing remote connections.
- Set up advanced authentication (SSO, SAML) and managed security for vendor and partner access.
Cisco Network Engineer
- Installed, configured, and monitored network devices as well as documentation relating to network topology, equipment, and configuration.
- Configured and troubleshooted routing protocols such as BGP, EIGRP, and OSPF
- Set up and troubleshoot IPsec VPN and MPLS connections between remote sites and partner networks.
- Performed IOS upgrades on Cisco routers and switches, validating configurations and ensuring high availability and security compliance.
- Diagnosed complex issues through packet capture analysis with Wireshark.
- Efficiently resolved IP network issues, achieving a 20% reduction in downtime and consistently meeting client Service Level Agreements (SLAs).
Education
Master of Science in Information Security Engineering (MSISE)
Bachelor of Science, Network Operations and Security
Full Stack Development (Java Focus)
Certifications
- AWS Certified Cloud Practitioner
- CCNA R&S
- Security+
- Network+
- EC-Council Certified Encryption Specialist
- ITIL v4
- Splunk Core Certified User
- Azure Fundamentals
- Linux Essentials
- A+
- CIW Site Development Associate
Core skills
Programming & Development
Java, JavaScript, Python, React, Spring Framework, Git, GitHub, MySQL
Security & Networking
Palo Alto (PAN-OS, Panorama, Prisma, Strata), Cisco (Firepower, Catalyst & Routers), Zscaler (ZIA, ZPA), CASB, Azure, Entra Microsoft Defender.
Endpoint & Exposure Management
CrowdStrike Falcon Suite (EDR/XDR, Spotlight), Rapid7, Tanium, Wiz, Qualys, Splunk.
Compliance & Risk
PCI DSS & PCI Card Production (CP), HIPAA, GDPR, NIST.