Skip to content
JB

Experience

Twenty years, two tracks, mostly at the same time.

Civilian security engineering and sixteen years of Air Force and Air National Guard service, overlapping from 2012 to 2023. Hover any segment for the role.

  • Justin Bowen, Security and Infrastructure Leader

    Industry

    20062026

    21 years · 9 roles

    Raya App, Inc. · Uber Technologies Inc · Protiviti Consulting · Alaska Airlines · REI · Amazon Inc. · Trustwave, Inc. · L3 Stratis · Awardspace Web Hosting

  • Justin Bowen speaking in US Air Force service dress

    Military

    20072023

    16 years · 9 roles

    Texas Air National Guard · Washington Air National Guard · USAF Reserves, INOSC–West · U.S. Air Force, Active Duty

'04'08'12'16'20'24
Industry
Military
Code
IndustryMilitaryCodeIndustry and military service ran concurrently, 2012–2023.

Roles in detail

6 roles

April 2025 – June 2026

Industry

Senior leadership

Head of Information Security / Founding Security Engineer

Raya App, Inc.

  • Established a comprehensive information security program from inception, covering all domains and governance frameworks from a technical and program leadership perspective.
  • Implemented AI security controls through hooks, proxies, and local client configurations to ensure secure model adoption.
  • Deployed and optimized EDR, NDR, CDR, CNAPP, and MDR solutions alongside a modern Mobile Device Management (MDM) suite.
  • Authored and enacted 23+ security policies and standards to formalize organizational security posture.
  • Optimized CI/CD pipelines by integrating security automation, AI, and IaC (Terraform / Ansible), significantly reducing production vulnerabilities and security gaps.
  • Directed Application and API security improvements, enhancing the resilience of core product offerings.
  • Led incident response workstreams, achieving successful resolution of critical incidents within hours of detection.
  • Collaborated with the Cloud Security Alliance (CSA) on AI Security documentation and steered internal AI strategy across business units.
  • Documented and executed a strategy for migrating to centralized SSO for streamlined login and role assignments.
  • Built a self-service AI suite integrating 15+ linters and security scanners, automating localized security reviews and development workflows and reducing late stage security blockers.

April 2020 – March 2025

Industry

Management

Staff Security Engineer & Technical Lead Manager

Uber Technologies Inc

  • Directed global network security operations for Uber and its subsidiaries, managing 12+ concurrent technical projects.
  • Architected and led execution against a 5-year security roadmap encompassing cloud and physical network infrastructure company-wide.
  • Created a security performance testing framework that reduced endpoint-related support tickets by 50%.
  • Developed a serverless detection system that proactively intercepted over 1,000 malicious files.
  • Spearheaded infrastructure redesigns to enhance platform resilience and mitigate large-scale attack vectors.
  • Deployed enterprise-scale Zero Trust and SASE solutions including Zscaler and iBoss.

2022 – 2023

Military

Senior leadership

Senior Manager (NCOIC) — Cyber Security Training

Texas Air National Guard

  • Rebuilt training program from near zero.
  • Prepared a 30-person team that successfully completed cyber security quick reaction force missions.
  • Managed training programs and 1:1 training for 30 technical leads.

2020 – 2022

Military

Senior leadership

Senior Manager (NCOIC) & Technical Lead

Washington Air National Guard

  • Rebuilt the Weapons and Tactics (WepTac) program; operational oversight and technical audits.
  • Identified and remediated 10+ critical technical discrepancies through rigorous internal auditing.
  • Managed and trained a 30-person security blue team to defend against nation-state Advanced Persistent Threats (APTs).
  • Rebuilt deployments and usage with IaC / CaC (Ansible).

May 2018 – April 2020

Industry

Management

Manager, Technical Security Services

Protiviti Consulting

  • Directed incident response and proactive threat hunting engagements for specialized client environments, as well as automation and orchestration across multiple domains.
  • Designed and implemented enterprise security architectures for large-scale cloud migrations.
  • Standardized company-wide monitoring and automation workflows to improve operational efficiency.

2017 – 2020

Military

Management

Technical Manager, Red Team

Washington Air National Guard

  • Established the unit's inaugural Red Team and provided training to security personnel across the USAF.
  • Executed dozens of threat detection engagements, authoring over 100 custom detection rules.
  • Led high-impact Purple Team exercises to validate and improve defense-in-depth strategies.

Earlier career

12 roles
  • 2017 – 2018

    Network Security Engineer · Alaska Airlines
    Industry
  • 2015 – 2017

    Blue Team Lead · REI
    Industry· Mgmt
  • 2015 – 2017

    Cyber Security Technical Lead, Cyber Protection Team · Washington Air National Guard
    Military· Mgmt
  • 2014 – 2015

    Enterprise Security Engineer 2 · Amazon Inc.
    Industry
  • 2012 – 2015

    Enterprise Network Security Lead and Auditor · USAF Reserves, INOSC–West
    Military
  • 2013 – 2014

    Senior Threat Network Security Engineer · Trustwave, Inc.
    Industry
  • 2012 – 2013

    Enterprise System Security Engineer · L3 Stratis
    Industry
  • 2010 – 2012

    Founding Member, Red Team — Network Security · U.S. Air Force, Active Duty
    Military
  • 2009 – 2010

    Site Lead Network Engineer · U.S. Air Force, Active Duty
    Military
  • 2008 – 2009

    Network and System Engineer · U.S. Air Force, Active Duty
    Military
  • 2007 – 2008

    Enlisted — basic training and technical school · U.S. Air Force, Active Duty
    Military
  • 2006 – 2007

    Forum Support Moderator · Awardspace Web Hosting
    Industry

Leadership

Nine years leading people, in two tiers.

Nine years leading people across two tiers. Senior leadership here means Head of / Senior Manager (NCOIC) scope — owning a program and its people — and deliberately stops short of executive or commissioned-officer level.

Senior leadership

6yrs

Head of Information Security · Senior Manager (NCOIC)

Program ownership end to end: strategy, budget-adjacent decisions, policy authority, and the people who carry it. Not an executive or officer role.

  • Head of Information Security / Founding Security EngineerRaya App, Inc. · April 2025 – June 2026
  • Senior Manager (NCOIC) — Cyber Security TrainingTexas Air National Guard · 2022 – 2023
  • Senior Manager (NCOIC) & Technical LeadWashington Air National Guard · 2020 – 2022

Management

3yrs

Manager · Technical Lead Manager

Direct team leadership — hiring, performance, delivery against a roadmap, and staying technical enough to review the work.

  • Staff Security Engineer & Technical Lead ManagerUber Technologies Inc · April 2020 – March 2025
  • Manager, Technical Security ServicesProtiviti Consulting · May 2018 – April 2020
  • Technical Manager, Red TeamWashington Air National Guard · 2017 – 2020

Recognition

  • Top Cyber Security Operator

    2016

    United States Air Force

    Selected as the top cyber security operator across the entire US Air Force.

Depth by area

Where the years actually went.

Infrastructure Security
18yrs
Incident Response
13yrs
Threat Detection
13yrs
Cloud Security
5yrs
Application Security
5yrs

Certifications

Languages

Twenty years of writing code.

  • Bash20y
  • Python18y
  • JavaScript12y
  • Go7y
  • x86 Assembly3y
  • PHP3y
  • Perl2y
  • Rust1y

Also worked with: Ruby · Crystal

Skills

107 tools

The working toolkit.

Cloud & Infrastructure

  • AWS
  • GCP
  • Azure
  • OCI
  • Vultr
  • OpenStack
  • Kubernetes
  • Cloud-Native Security
  • Multi-Cloud Governance

Artificial Intelligence

  • AI Security
  • LLM Security
  • AI Governance
  • Ollama
  • llama.cpp
  • Claude
  • Gemini
  • OpenAI
  • Mistral
  • AI Sandboxing
  • Cluster Hardening
  • Guardrails

Networking

  • TCP/IP
  • SASE
  • SSE
  • DMVPN
  • PKI
  • Wireguard
  • IPSEC
  • Cisco
  • Juniper
  • Arista
  • Envoy
  • Cilium
  • eBPF
  • Micro-segmentation
  • SDN
  • Identity-Aware Proxy

Systems Security

  • CrowdStrike
  • SentinelOne
  • Iru
  • FleetDM
  • macOS
  • Linux
  • Windows

Programming

  • Python
  • Go
  • Bash
  • Rust
  • JavaScript
  • x86 Assembly
  • PHP
  • Perl
  • Ruby
  • Crystal

Automation & Tooling

  • Ansible
  • Terraform
  • OpenTofu
  • n8n
  • Apache NiFi
  • UiPath
  • Splunk
  • ELK
  • LogRhythm
  • Zscaler
  • iBoss
  • Wiz

Detection & Response

  • Threat Intelligence
  • Incident Response
  • Threat Hunting
  • Regex
  • Snort
  • Splunk
  • ELK
  • LogRhythm
  • FireEye
  • Purple Teaming

Product Security

  • RASP
  • Approov
  • AppDome
  • Cloudflare
  • Bot Prevention
  • REST API Protection
  • gRPC API Protection
  • GraphQL API Protection

Identity & Access

  • Okta
  • SSO
  • SAML
  • OIDC
  • OAuth2
  • SPIFFE/SPIRE
  • JWT
  • Authentication Proxies

DevSecOps

  • GitHub Actions
  • GitLab CI/CD
  • Wiz
  • Socket.dev
  • Snyk
  • Software Supply Chain Security

Governance, Risk & Compliance

  • Zero Trust
  • NIST
  • ISO 27001
  • PCI v4
  • HIPAA
  • NYDFS
  • CSA STAR
  • SOC 2
  • Policy & Standards Authoring

Education

  • Bachelor of Science, Network Engineering and Security

    Western Governors University

  • Bachelor of Science, Computer Science

    Regis University

    Minor in Psychology

  • Associate of Science, Cyber Defense Operations

    United States Air Force

Resume