dobroski

Mike Dobroski

Chicago, IL | mike@dobroski.net | linkedin.com/in/mike-dob | dobroski.net

Security & Compliance | CMMC 2.0, NIST SP 800-171, CIS Controls, Security Governance

Engineering version: /resume/. Data as JSON: /resume.json.

Summary

Security engineer who implements controls and proves they work. Supports CMMC 2.0 Level 2 (NIST SP 800-171) compliance for a defense contractor, authored the company's AI governance framework, and rolls out CIS-aligned baselines across 150+ Microsoft 365 tenants through a documented pilot, visibility, and rollback process. Works directly with auditors, forensic investigators, and legal counsel, and automates compliance reporting so gaps are measured, not guessed.

Experience

Cybersecurity Engineer

Rouse Consulting Group
Moline, IL
Oct 2025 to Present
  • Supports a CMMC 2.0 Level 2 (NIST SP 800-171) program for a defense contract client: implementing required controls and preparing and uploading evidence with the client's auditors.
  • Authored the company's AI governance framework: agent authentication and service accounts, security-group access tiers, ownership, approval and publishing lifecycle, and acceptable use of LLMs with client data; restricted preview models to approved staff based on data-retention risk.
  • Ships every security policy change through a standard process: pilot group, per-client alert visibility, and a documented rollback plan. Used it for CIS-aligned Entra ID and Intune baselines (Inforcer), Huntress ISPM controls, and a Defender for Office 365 overhaul across 150+ tenants.
  • Runs compliance reviews and client security advisory sessions about twice weekly; works with auditors, forensic investigators, and legal firms on active investigations; supports vCIOs in QBRs.
  • Built automated reporting to audit SPF, DKIM, and DMARC across all Microsoft 365 tenants; drove remediation with account managers and clients, taking enforced DMARC (no p=none) from 65% to 100% of domains.
  • Led a Cisco Umbrella DNS security revitalization: policy baselining, standardized resolver configuration (firewalls, DHCP, domain controllers), and enforcement validation with Liongard, raising workstation enforcement from ~50% to 95%+ in 60 days; built Rewst-ImmyBot API automation and runbooks to sustain it.
  • Owns the MSP security stack across ~150 SMB environments (Huntress, ConnectSecure, Cisco Umbrella, Inforcer, Liongard, EasyDMARC, CIPP) and its client security onboarding/offboarding templates in ConnectWise PSA.
  • Triages ~10 critical and ~50 non-critical EDR/ITDR alerts monthly with sub-30-minute response on criticals; coordinates containment and post-incident analysis with the Huntress SOC.
  • Built and tuned a multi-tenant CIPP alerting pipeline across 150+ Microsoft 365 tenants and routed enriched alerts for triage.

Network Administrator

Rouse Consulting Group
Moline, IL
Jul 2024 to Oct 2025
  • Administered Microsoft 365, Entra ID, and Active Directory across SMB clients: provisioning, licensing, group and OU design, Group Policy, Conditional Access and MFA enforcement, and user lifecycle.
  • Supported SonicWall, FortiGate, Meraki, and UniFi firewalls: access rules, geo-IP exclusions, client and site-to-site VPN troubleshooting; resolved authentication failures and lockouts through log analysis.

Certifications

  • CompTIA Security+
  • CompTIA Network+
  • ISC2 Certified in Cybersecurity (CC)
  • ConnectSecure Certified Administrator

Technical skills

Frameworks
CMMC 2.0 Level 2, NIST SP 800-171, CIS Controls and Benchmarks, HIPAA, PCI-DSS
Governance
Policy and baseline design, change control with rollback, AI governance, audit evidence, client advisory
Security Platforms
Huntress (EDR, ITDR, SIEM, ISPM), Inforcer, CIPP, Cisco Umbrella, EasyDMARC, Liongard, ConnectSecure, Nessus
Identity & Cloud
Microsoft Entra ID, Conditional Access, Intune, Active Directory, Microsoft 365, Defender for Office 365
Automation
Rewst, PowerShell, Python, REST APIs, Microsoft Copilot Studio

Projects

Homelab: Security Operations Lab

dobroski.net
  • Proxmox lab mirroring a small SOC: Wazuh SIEM/XDR on all hosts, Graylog, Nessus Essentials, Grafana over OpenSearch; pfSense with Snort IDS/IPS, VLAN segmentation, and strict ACLs; Tailscale and Cloudflare Tunnel for zero-trust access.

Education

  • B.S.E. Computer Science & Engineering (Computer Networks) | University of Iowa | GPA 3.5 | May 2022
  • Graduate coursework, M.S. Computer Science (Cybersecurity) | Johns Hopkins University | 12 credits, 4.0 GPA | 2023 to 2024