Cameron Woodward

01. About

I'm a security engineer with 5+ years hardening AWS cloud infrastructure and enforcing security controls across the software delivery lifecycle. My work sits where cloud infrastructure, containers, and the release pipeline meet: AWS IAM and S3, container and Kubernetes security, and SDLC scan-gate controls that stop non-compliant releases before they're deployed.

I came up through software engineering, which shapes how I do security. I build the scanning platforms, pipelines, and APIs myself, and I care about test coverage, reliability, and developer experience as much as findings. My background also includes applied cryptography, from mapping PGP keys to threat actors in dark web investigations, and leading security programs that span multiple organizations.

Next, I'm starting an M.S. in Computer Science (AI specialization) at Georgia Tech in January 2027. Long term, I want to help lead the field of AI-driven security.

03. Experience

1. Security Engineer II @ Capital One

   Aug 2022 to present · McLean, VA

   • Operate the SDLC security gate governing container release decisions enterprise-wide. It scans thousands of container images across the artifact registry and millions of containers across production workloads daily, and blocks non-compliant builds before deployment.
   • Directed the strategic integration of container and image vulnerability scanning platforms across two Fortune 200 organizations, Capital One and Discover Financial Services, onto a unified system, achieving full compliance ahead of a federal deadline.
   • Re-engineered the enterprise registry scanning pipeline architecture, cutting average container scan time 62% (4 min to 1.5 min) across all company-wide scans.
   • Architected a scheduler and redrive Lambda system with dead-letter-queue reprocessing, achieving 100% scan coverage while raising automated test coverage from 71% to 100%.
   • Contributed to VulnHunter, Capital One's open-source vulnerability scanner that combines SAST-style code analysis with chained-attack detection.
   • Deployed Wiz runtime security sensors across containerized Fargate workloads, engineering the integration and delivering full unit and acceptance test coverage.
   • Led resolution of high-severity production incidents, including a full scanning-platform outage. I coordinated the cross-team response and executive communication, and service was restored the same day.
   • Built Java and Go APIs powering B2B virtual card payment creation, and led a company-wide Java 8 to 17 migration across production services.

2. Software Developer @ CGI Federal

   Aug 2021 to Aug 2022 · Fairfax, VA

   • Architected a financial planning and tracking application for a federal agency, integrating custom C# plug-ins with Microsoft Power Platform to streamline budgetary reporting.
   • Automated infrastructure provisioning with Puppet Bolt and resolved production issues through root-cause incident analysis, improving deployment reliability.

3. Software Developer Intern @ Bluestone Analytics

   Jan 2021 to May 2021 · Charlottesville, VA

   • Built Python web scrapers and AWS S3/Kibana data pipelines supporting federal cybercrime investigations into dark web threat activity.
   • Applied public-key cryptography, parsing PGP keys with the PGPy library and mapping them to threat actor identities to support attribution in active investigations.

05. Education & certifications