Zac Scott

Software Engineer

In my role, I leverage my expertise in security automation and software engineering to drive innovation across multiple workstreams. I develop comprehensive internal automation solutions, collaborating with teams across the company—including SOC, Service Delivery, Pentest/GRC Consulting, Finance, and Security Engineering—to streamline processes and make everyone's lives easier.

One significant component of my work involves helping maintain and improve our Cassini CTI SaaS platform. My contributions here lie around rewriting integral components and making changes to the core infrastructure and CI/CD pipelines to streamline safe and reliable deployments. Additionally, I collaborate with customers to help build and maintain their bespoke software solutions, ensuring robust security controls whilst meeting their specific business requirements. My work spans diverse environments including AWS, Azure, and on-premises deployments. I utilize modern development practices with Python, incorporating modern tools like UV, Pydantic, Ruff, and SqlAlchemy allowing for reliable, type-safe code development with high velocity. I also work extensively with Docker and Linux to enable robust, deterministic, and scalable deployments.

Software Engineering Manager

During my tenure at InPhySec Security, I passionately advocated and championed the initiative to develop software solutions aimed at automating and enhancing business outcomes. Drawing upon my prior experience as a SOC analyst and my software engineering expertise, I dedicated my focus to creating software and automation tools that bolster the SOC team's capabilities.

Throughout my time in this position I wrote a variety of automation, spanning from assisting detection triage, ingesting threat feeds, automating customer assurance reporting for our MSS technologies, integrating with our internal SIEM and SOAR, building a robust case management system, and writing ad hoc scripts to help with incident response gigs.

Security Engineer

Security Engineer

Graduate Security Engineer

Rotated into the Asset Security pod focusing on uplifting the platform security at Xero. My individual contributions were around automating Docker deployments with AWS CodePipeline and developing Python software for vulnerability management and reporting.

Security Intern Engineer

Internship as a security engineer in the Identity & Access security team at Xero. My focus was working on an internal project and initiative to govern access to platform applications using a new Okta instance as the single-source of truth IdP.

Cyber Security Analyst

Security analyst at InPhySec helping provide our MSSP service to our customers. In this position I would triage detections and initiate threat hunting across our customers' Falcon EDR, Netskope CASB, and Vectra NDR environments.

Web Regression Tester

Developed an automation regression test suite for a Web Application interacting with smart meters using Robot Framework and Python.

Engineering Computer Science (ECS) Tutor

Computer Science tutor for the courses COMP112 , COMP103 , XMUT103 (Marking Only)

Python-Injection-Framework (pif)

github.com/scottzach1/Python-Injection-Framework

A simple Python dependency injection framework.

Mechanical Keyboard (Planck)

github.com/scottzach1/planck

One hobby of mine has been to develop the perfect keyboard layout to suite my needs using QMK Firmware.

Linux Dotfiles

github.com/scottzach1/dotfiles

Configuration files for the different software I run on my personal Linux devices

Bus Sharp

github.com/scottzach1/Bus-Sharp-Ionic
github.com/scottzach1/Bus-Sharp-React-Native

Mobile / web app to track Metlink services around Wellington, written in React + Ionic.

Regression Testing Suite

edmi-meters.com/product/software/storm

Developing an automated regression test for a web application dealing with smart meters using Python, Selenium and Robot with TeamCity integration.

Chap's Challenge

github.com/scottzach1/Chaps-Challenge

A SWEN225 group project developing a modern take on the iconic Chip’s Challenge using Java Swing.

Movie Database

github.com/scottzach1/Movie-Database

A movie database server written in C++ for NWEN241 where a user can request movie information via another shell instance using a TCP connection.

Soles for Syria

Google Drive link

A Bootstrap CSS website written for NGO organisation Soles for Syria.

Victoria University of Wellington

Grade Average A

Dean's List 2018, 2019, 2020, 2021