MATT SKRZYPEK

Email security · Incident response · Security awareness

Matt Skrzypek

Security Analyst

Security analyst with more than six years at TMX Group, focused on email security and Level 2 and 3 incident response. Improved email-security workflows through automation and helped reduce phishing susceptibility through training and awareness. Experience mentoring eight interns, onboarding four SaaS platforms and contributing to vulnerability management.

Hamilton, Ontariomatt@skrzypek.caGitHub ↗

6+ yearsSecurity experience at TMX Group

8 internsMentored in security operations

4 SaaS platformsOnboarded into the organization

Professional experience

Security Analyst

TMX Group · January 2020–present

  • Email security & incident response: Handle Level 2 and 3 incident response alongside email security responsibilities.
  • Phishing resilience: Helped reduce phishing susceptibility and design and establish a phishing and social engineering training and awareness program over four years.
  • Workflow improvement & automation: Improved email-security workflows and automated recurring work.
  • Mentoring & knowledge sharing: Trained and mentored eight individual interns in security operations.
  • Platform onboarding: Onboarded four SaaS platforms into the organization.
  • Vulnerability management: Contributed to vulnerability management activities.

AI-assisted technical work

  • Gemini: Use for onboarding support, data management, report creation, workflow optimization and day-to-day inbox tasks.
  • Codex: Use for personal homelab configuration and troubleshooting, website development, and DNS and custom-domain email setup.

Applied technical projects

Unraid homelab

Unraid · Docker · Linux · Ollama · Open WebUI

Run containerized services and local AI on Unraid. Configure container networks, persistent storage and resource limits, with aggregate CPU, memory and network monitoring.

HTTPS service portal

Nginx Proxy Manager · DNS · TLS · Let's Encrypt

Route self-hosted applications through a reverse proxy using custom domains and HTTPS. Configure shared portal authentication and app logins, and check HTTPS redirects, certificate validation and protected endpoints.

Custom-domain email

MX · SPF · DKIM · DMARC · IMAP / SMTP

Set up Zoho Mail and Thunderbird on a custom domain. Configure DNS mail routing and sender authentication; confirm SPF, DKIM and DMARC pass on delivered mail.