Skip to content
View RonMercier's full-sized avatar
🧑‍💻
🧑‍💻

Block or report RonMercier

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
RonMercier/README.md

Ron Mercier

Cloud & Cybersecurity Engineer · Enterprise technical support, incident response, and infrastructure that holds up when it matters.

I work where cloud support meets security: complex escalations, live incident triage, and the kind of infrastructure work where the logs don't lie and the customer is waiting. Currently Technical Support Engineer at Verint (enterprise Fraud & Security platforms) and AI Model Evaluator at Handshake. Previously Cloud Support Specialist at Akamai Technologies, handling DDoS alerts, compromised account remediation, and database recovery across 500+ global customers.

🛠️ What I actually work on

  • Enterprise technical support - root-cause analysis, log forensics, cross-team escalations at Verint and Akamai
  • Cloud security & incident response - DDoS triage, compromised account remediation, Linux infrastructure hardening
  • AWS serverless engineering - Lambda, DynamoDB, API Gateway, SAM, OIDC-authenticated CI/CD
  • Practical security writing - real attack breakdowns and honest tool reviews at SecureByDefault.io

📡 Currently building

  • 🛡️ SecureByDefault.io - Real attack breakdowns, vetted tools, no hype
  • 📬 The SecureByDefault Brief - Weekly security newsletter for IT pros
  • 🔧 Open-source security toolkits, hardening configs, and incident-response resources (pinned below)

🎯 Featured writing

🎓 Credentials

MSc Cybersecurity & Information Assurance · BSc Computer Science · CySA+ · PenTest+ · ISC2 CC · AWS CCP

Verint - Technical Support Engineer, Fraud & Security Solutions · Jan 2025–Present
Handshake - AI Model Evaluator · May 2026–Present
Akamai Technologies - Cloud Support Specialist · Sept 2022–Jan 2025
AT&T - Senior Network Technician · Aug 2016–Jan 2022

🔌 Connect

Portfolio Website Newsletter LinkedIn

"Security that holds up under real conditions, not just in slide decks."

Pinned Loading

  1. AWS-S3-Static-Website AWS-S3-Static-Website Public

    Personal portfolio - SecureByDefault dark theme, AWS S3 + CloudFront + Route 53, GitHub Actions CI/CD, serverless visitor counter via Lambda + DynamoDB.

    HTML 1

  2. Incident_Response_Writeup_SQLi Incident_Response_Writeup_SQLi Public

    SOC alert walkthrough: SQL injection payload detected on an internal web server; IP reputation analysis, URL decoding, HTTP response analysis, and playbook closure. LetsDefend SOC165.

    1

  3. cloud-resume-backend cloud-resume-backend Public

    Serverless visitor counter API for the Cloud Resume Challenge - AWS Lambda, DynamoDB, API Gateway, SAM IaC, OIDC-based GitHub Actions CI/CD. Python 3.12.

    Python

  4. securebydefault-server-hardening securebydefault-server-hardening Public

    Production-grade Linux server hardening for cloud VPS: configs, scripts, and real attack documentation from securebydefault.io

    Shell

  5. cloud-security-checklist cloud-security-checklist Public

    A practical, engineer-built security checklist for cloud infrastructure and small businesses - 28 actionable items across 6 categories, with free verification tools and an automated audit script.

    Shell

  6. ddos-tabletop-toolkit ddos-tabletop-toolkit Public

    A practitioner's DDoS incident response tabletop toolkit - 5 scenarios, runbooks, and templates built from real IR experience. Run your first exercise in 30 minutes.