Professional Profile

Michael Bell. Engineering to cybersecurity.

Cybersecurity-focused Senior Electronics Engineer with 20+ years in engineering, product development, embedded systems, and systems administration, now building hands-on experience across security operations, vulnerability management, detection, and endpoint security.

• SOC Engineer
• Detection Engineer
• Vulnerability Management
• Product Security
• Medical Device Cybersecurity
• Embedded Security

01 Professional Summary

Cybersecurity-focused Senior Electronics Engineer with 20+ years of experience in engineering, product development, embedded systems, troubleshooting, validation, technical risk assessment, and systems administration, combined with hands-on cybersecurity experience across security operations, vulnerability management, security monitoring, endpoint security, SIEM, and information assurance.

Experienced with vulnerability discovery and prioritization, security telemetry, threat detection, Windows and Linux environments, Active Directory, SIEM technologies, endpoint security, network security monitoring, and security automation. Hands-on experience with tools and technologies including Splunk, Wazuh, Sysmon, Tenable, Axonius, pfSense, Suricata, Windows Defender, CrowdStrike, Python, PowerShell, Bash, and Linux.

Brings an engineering-driven approach to cybersecurity: identify the problem, analyze evidence, determine root cause, implement a technical solution, validate the result, and continuously improve the control.

Currently completing a B.S. in Information Technology with a Cybersecurity focus while pursuing additional offensive-security training through PNPT and HTB CPTS.

02 Core Competencies

03 Professional Experience

Senior Electrical Engineer

Nevro/Globus Medical — Pennsylvania — 2026 – Present

• Design, develop, troubleshoot, validate, and support electronic systems and products within a medical-device engineering environment.
• Apply engineering analysis, debugging, root-cause investigation, verification, and validation methodologies to complex hardware and embedded-system problems.
• Evaluate technical risks and develop corrective actions based on system behavior, test results, and engineering evidence.
• Collaborate across engineering and product-development functions to investigate technical issues and implement reliable solutions.
• Apply experience in electronics, embedded systems, firmware, testing, and product development within a highly regulated environment.
• Maintain a security-focused perspective on connected products, embedded systems, technical risk, and product lifecycle considerations.
• Continue developing cybersecurity expertise applicable to medical-device and product-security environments.

Relevant cybersecurity intersection: Product Security · Medical Device Cybersecurity · Embedded Security · Technical Risk · Secure Product Development · Vulnerability Management

Cybersecurity Co-op — Security Operations, Engineering & Assurance

AmeriHealth Caritas — Pennsylvania — 2026 (3 months)

• Supported cybersecurity operations with an emphasis on vulnerability management, security monitoring, asset visibility, and security assurance.
• Used Axonius for asset discovery and security asset visibility.
• Used Tenable to support vulnerability identification, analysis, and remediation activities.
• Applied CVSS concepts to help evaluate and prioritize vulnerabilities based on severity and risk.
• Monitored and researched emerging cybersecurity threats using sources including CISA KEV, H-ISAC, Intel 471, CyberWire, SANS Storm Center, and Feedly.
• Supported cybersecurity analysis and threat-intelligence activities to identify relevant vulnerabilities, threats, and security risks.
• Worked with security operations and engineering processes involving endpoint, infrastructure, and vulnerability-management data.
• Contributed to security documentation and analysis used to support vulnerability-management and security-assurance activities.
• Gained hands-on exposure to enterprise cybersecurity operations within a healthcare environment.

Technologies: Axonius · Tenable · CVSS · FortiSOAR · Threat Intelligence · CISA KEV · H-ISAC · Vulnerability Management · Security Operations

Test Design Engineer / Cybersecurity Team Member

Megger Ltd — Pennsylvania — 2023 – 2026

• Designed, developed, tested, and validated electronic test systems supporting product development and manufacturing.
• Performed troubleshooting, root-cause analysis, failure investigation, and technical risk evaluation for complex hardware and embedded systems.
• Developed and maintained test procedures, validation plans, and technical documentation.
• Supported cybersecurity activities for software and embedded systems as part of the organization's cybersecurity efforts.
• Participated in cybersecurity risk identification and evaluation for products incorporating software and embedded technologies.
• Supported security and compliance documentation and contributed to cybersecurity-related engineering processes.
• Participated in activities associated with ISO 27001 and emerging cybersecurity requirements, including European Cyber Resilience Act considerations.
• Used engineering and security analysis to identify technical risks and determine appropriate mitigations.
• Worked with cross-functional engineering and cybersecurity teams to address product-level technical and security concerns.
• Used Jira for issue tracking, technical investigation, corrective actions, and engineering workflow.

Technologies / Areas: Embedded Systems · Electronics · Cybersecurity · Risk Assessment · ISO 27001 · Cyber Resilience Act · Jira · Validation · Root Cause Analysis · Security Documentation

Senior Hardware / Firmware Engineer & Systems Administrator

Peripheral Dynamics Inc — Pennsylvania — 2005 – 2023

• Designed, developed, debugged, tested, and supported electronic hardware and embedded firmware across the complete product-development lifecycle.
• Developed and maintained embedded systems using C/C++ and embedded C.
• Performed hardware and firmware troubleshooting using structured diagnostic and root-cause-analysis methodologies.
• Administered Windows-based IT infrastructure supporting engineering and business operations.
• Managed Active Directory, Group Policy, user accounts, permissions, Windows Server, DNS, DHCP, and Microsoft Exchange environments.
• Supported endpoint, network, infrastructure, and access-control security.
• Implemented and maintained infrastructure security controls and administrative policies.
• Supported backup, disaster-recovery, and network-connectivity requirements.
• Implemented and supported network infrastructure including firewall, routing, wireless, and connectivity technologies.
• Assisted with infrastructure modernization and security improvements as organizational requirements evolved.
• Applied engineering troubleshooting methodology to IT infrastructure and security problems.
• Served as a technical resource across hardware, firmware, software, networking, systems administration, and infrastructure issues.
• Developed a strong foundation in systems, networking, endpoint administration, identity management, and technical problem solving that now supports cybersecurity engineering work.

Technologies: Active Directory · Group Policy · Windows Server · DNS · DHCP · Exchange · Windows · Networking · Embedded C/C++ · Electronics · Firmware · Hardware · Infrastructure Security

04 Cybersecurity Projects & Hands-On Experience

Home SOC / Purple Team Cybersecurity Lab

A personal cybersecurity engineering project: a multi-system home SOC and Purple Team environment simulating enterprise security operations, detection engineering, vulnerability management, and incident response.

Architecture / Technologies:

• pfSense firewall
• Suricata IDS/IPS
• Wazuh SIEM/XDR platform
• Splunk SIEM
• Sysmon
• Windows Server / Windows 10 / Windows 11
• Linux
• Active Directory
• Kali Linux
• TheHive case management
• Shuffle SOAR
• Vulnerable Active Directory environment
• Network segmentation and isolated security-testing networks

Activities:

• Deploy and configure security monitoring infrastructure.
• Collect and analyze Windows, Linux, network, firewall, IDS/IPS, and endpoint telemetry.
• Develop and tune Wazuh and Splunk security alerts.
• Analyze authentication, process, PowerShell, endpoint, and network activity.
• Develop detection scenarios based on simulated attacks.
• Test security controls using offensive-security techniques.
• Investigate generated alerts and document findings.
• Develop workflows connecting security telemetry, detection, investigation, and case management.
• Practice SOC operations, detection engineering, incident investigation, vulnerability management, and defensive security engineering.

Cybersecurity Automation & Scripting

Developing Python, PowerShell, and Bash capabilities for cybersecurity automation, analysis, and engineering workflows. Areas of focus include security data processing, log analysis, vulnerability analysis, security workflow automation, system administration, network/security tooling, SOC analyst automation, security reporting, and repetitive-task automation.

05 Education

06 Certifications

07 Professional Development

• TryHackMe cybersecurity training and hands-on labs
• Hack The Box penetration-testing training
• CodePath Cybersecurity coursework
• Forage cybersecurity job simulations
• Practical SOC and defensive-security labs
• Network security and penetration-testing exercises
• Windows/Linux security administration
• SIEM and security-monitoring exercises

// Professional Strengths