Amanda Hunt

CV · Last updated October 2026

Amanda Hunt

Cloud Security Engineer in Los Angeles.

Download CV (PDF)

Summary

I spent four years in managed services. For the last two, I was the sole senior technical resource and final escalation point for an entire regional market across network security, endpoint, identity, cloud, email security, and vulnerability management. I deliver network, identity, and cloud projects, and I automate the work around them. I scope, design, build, document, and hand off. I train and mentor other engineers, and set the automation and documentation standards that other regions adopted. If a tool has an API, I can wire it in for triage, enrichment, and reporting.

Experience

  1. Senior Security Engineer

    Apr 2025 – Oct 2026

    Managed services provider

    • Led end-to-end client projects across onboarding, networking, cloud, endpoint, and email. Ran environment assessments covering infrastructure, identity, cloud posture, and security readiness.
    • Planned and delivered Azure hybrid deployments, Microsoft 365 configuration, Intune device management, Conditional Access and MFA, SAML and SSO integrations, VPNs, and vulnerability management.
    • Configured firewalls, switches, VLANs, and DMZs for client networks. Deployed and managed email security (Mimecast, Defender, Avanan) and SPF, DKIM, and DMARC records. Implemented DNS record monitoring.
    • Led a .NET end-of-life dependency assessment across 424 systems for an audit: inventoried installed runtimes and SDKs, determined which versions were genuinely in use, and narrowed the real exposure to 2 dependencies; wrote the remediation script and validated findings cleared in Tenable.
    • Built ticket-driven automation on Pia connecting ConnectWise to SentinelOne, Avanan, Tenable, NinjaOne, Pax8, Microsoft Graph, and Exchange Online. In one three-month period, twelve packages ran 2,560 times across 2,151 tickets. Packages included KnowBe4 phish-alert enrichment, mailbox online-archive provisioning, and new-hire onboarding via Azure AD activities.
    • Triaged SOC alerts from SentinelOne EDR and Arctic Wolf: true-positive analysis, static detection review, and client-facing incident writeups.
    • Investigated real attacks: OAuth device-code phishing, ransomware detections on Linux hosts, and coordinated with third-party penetration testing teams on findings.
    • Hardened Palo Alto security profiles: reviewed URL filtering and threat prevention policies against best practice and closed gaps in outbound inspection.
    • Primary technical contact for clients during projects. Documented every project for handoff to support teams.
    • Mentored engineers and contributed to delivery standards. Covered after-hours and weekend on-call on an ad hoc basis for critical issues.

  2. Managed Services Engineer

    Jun 2022 – Apr 2025

    Managed services provider

    • Onboarded and managed networking, endpoint, server, and host-based security services.
    • Network and infrastructure administration across client environments.
    • Escalation point for the help desk. Guided junior technicians through complex issues.
    • Led professional services engagements from scoping to delivery.

  3. Lab Manager

    Feb 2022 – Jun 2022

    University networking and cybersecurity lab

    • Led a team of 7 lab assistants on projects with a focus on automation.
    • Supported faculty with classroom virtualization.
    • Deployed Splunk to monitor usage of more than 10 network devices, 10 servers, and 100 virtual machines. Aggregated and correlated over 15 log source types across 30 systems. Built 25 detections for anomalous user and system activity.

  4. Threat Analyst

    Sep 2021 – Jun 2022

    Collegiate cyber defense club

    • Lead threat hunter. Threat hunting with Splunk and Elasticsearch in competition and lab environments.
    • First place in the state and Midwest qualifiers and at the Iowa CDC in 2022. Competed at the Global CCDC in 2021.

Selected work

Project write-ups, with what I built and how it turned out, are on the Work page.

See the work →