Nicholas Seratt

Senior Security Engineer with 10+ years securing cloud and on‑prem environments across diverse industries. Deep hands-on experience with SIEM/EDR engineering, detection development, threat hunting, incident response, vulnerability management, and automation. Proven ability to harden systems, deploy Zero Trust controls, and lead high-impact IR cases including ransomware and account compromise.

Strong technical depth across Azure/Entra, AWS, M365, Windows, and Linux. Improved security posture for 100+ organizations through scalable MSP/MSSP security stack development and continuous hardening initiatives.

Virtual CISO / Sr. Security Engineer - Uncomplicate IT - Boston, MA

(2021-03 - 2026-07)

Built and deployed full-stack security controls (EDR/MDR, SIEM, IAM, SASE) across client environments, improving detection coverage and reducing incident volume.

• Engineered Azure/Entra and AWS security baselines; implemented Conditional Access, MFA, and Zero Trust controls to harden identity and reduce attack surface.
• Automated onboarding, remediation, and deployment workflows using PowerShell, Python, and n8n, reducing manual workload and response time by 40%.
• Led IR for 50+ ransomware outbreaks, account compromise, insider threats, and malware cases; reduced containment time by 40% through automation.
• Built custom detections and performed threat hunting, improving alert fidelity and reducing false positives by 30%.

Sr. Security Engineer - Focus Technology Solutions - Boston, MA

(2018-08 - 2021-03)

• Co-developed the company's cybersecurity practice; served as technical lead for security engineering and IR.
• Delivered vCISO services, security assessments, and policy/control implementation.
• Led SOC operations for internal and client environments.

IT Help Desk Supervisor & Sr. Helpdesk Engineer - Focus Technology Solutions - Boston, MA

(2015-06 - 2018-04)

• Managed and mentored Help Desk team; improved response times through workflow automation and metrics.

Applied Security Engineering Projects - Focus Technology Solutions - Boston, MA

(2015-06 - 2021-03)

• Adcole Aerospace (2018–2019): Guided DoD/NIST compliance using Exostar; maintained POA&M; led cybersecurity risk meetings.
• Braintree Electric Light Dept. (2019–2021): Ran bi‑weekly cybersecurity risk meetings; maintained POA&M; supported long‑term risk reduction, ransomware incident response.
• Granite Telecommunications (2020–2021): Delivered vulnerability management for 400+ endpoints and government systems; managed Tenable scans, patching, remediation, and custom deployment scripts; led Linux system management.
• Implemented a local LLM‑driven IR assistant that summarizes event logs, correlates suspicious activity, and recommends triage actions while maintaining full offline privacy.
• Developed a Retrieval Augmented Generation (RAG) platform enabling secure document search and question answering across internal knowledge bases.
• Automated SOC workflows using LLMs to classify alerts, enrich telemetry, and generate analyst‑ready summaries, reducing manual triage time.
• Developed AI‑assisted security tooling that automates vulnerability enumeration and Sysmon logs to produce prioritized attack‑surface summaries and exploit‑path hypotheses.
• Built a RAG‑based security analysis system using ChromaDB to index scan results and provide natural‑language risk assessments for faster triage.
• Designed preprocessing pipelines for large text datasets to support LoRA fine‑tuning for security‑specific model behavior.

Associate of Science - Information Technology - Middlesex Community College (2013)