~/resume
Résumé
Distinguished Security Engineer at Verizon, Aldie VA. A decade-plus building and breaking security systems — from terabit-scale DDoS mitigation and firewall automation to exploit development and CVE research.
Kevin Kirsche
Distinguished Security Engineer, Verizon
A decade-plus building and breaking security systems — from terabit-scale DDoS mitigation and firewall automation to exploit development and CVE research.
// Experience
Verizon
2015 – Present- Mar 2025 – Present
Distinguished Engineer
· Aldie, VAAldie, VA
- Built an IRM-specific LLM that reduced total work reaching the team by 21.6% and overall average turnaround time by 52%, while improving projects closed immediately by 144% and within three days by 100%.
- Designed and built the user interface and API fronting the model, semantic search and related capabilities.
- Dec 2023 – Present
Distinguished Security Engineer
· Ashburn, VAAshburn, VA
- Led the architecture that turned Verizon's firewall request system into a general-purpose request-and-implementation platform, retiring three commercial systems and saving the business $5M/year.
- Unified the team's code-quality standards and automated testing, cutting reported bugs 92% across 4,000 active application users in the first half of 2024.
- Sep 2021 – Dec 2023
Senior Principal Security Engineer
· Ashburn, VAAshburn, VA
- Built a proof-of-concept NIST Cybersecurity Framework compliance auditor giving near-real-time visibility into Verizon's OpenShift platform — justifying a dedicated team to productize it.
- Led all technical and design work on the firewall request & implementation system, reducing annual expense by $1M/year and time-to-approval by 76%.
- May 2018 – Sep 2021
Principal Security Architect
· Ashburn, VAAshburn, VA
- Implemented real-time configuration automation for the global DDoS Shield platform, protecting Fortune 50 customers from terabit-scale attacks with no downtime.
- Led a real-time vulnerability-detection platform across Verizon's lab environments, improving device coverage 43% and reducing penetration-test findings 67%.
- Designed and taught an offensive-security and secure-development curriculum, and ran penetration tests alongside the network-security team.
- Mar 2015 – May 2018
Security Architect
· Ashburn, VAAshburn, VA
- Built next-generation tooling for network and security teams: internet route-registry management, malware-infection analysis and command-and-control detection.
- Co-architected DDoS Shield, Verizon's automated global denial-of-service mitigation platform.
- Automated Nessus scan orchestration, result processing and remediation planning; ran penetration tests and built automation to speed them up.
Applied Network Solutions
- Jul 2014 – Mar 2015
Software Engineer
· Chantilly, VAChantilly, VA
- Built a network-anomaly dashboard rendering 100 GB/day of NetFlow.
- Cut reported bugs 30% through expanded automated integration and regression testing.
Hampden-Sydney College
- Jul 2012 – Jul 2014
Graphic Designer
· Hampden-Sydney, VAHampden-Sydney, VA
- Designed marketing for alumni-donation campaigns raising $500K+ each, and built the primary online gift form with card validation and encryption.
- Drove a 35% increase in web traffic through social-media graphics and web work.
Envato Tuts+
- Jun 2013 – Nov 2013
Freelance Writer
· RemoteRemote
In-depth macOS application guides, tutorials and productivity tips for the Envato network.
Razer Design
- Nov 2008 – Jul 2014
Founder & Designer
Freelance design studio — a WordPress portfolio/blog platform plus websites for small-business clients, in Dreamweaver and Photoshop.