System Engineer

• Sep 2023 - Present

Security Engineer

• Jan 2021 - Sep 2023

• Integrated as an application security lead into application development teams to oversee and regulate the security posture of new application features from conception to implementation.• Collaborated with product owners and project managers to implement security controls and initiatives into the SDLC process.• Collaborated directly with developers to resolve security issues and implement coding best practices.• Led a diverse team of members across the globe in scheduling, reviewing, and tracking efficiency of our application security assessments using Jira and proprietary workflows.• Performed MANUAL application security penetration testing, following OWASP Top 10 methodology, in search of high severity security bugs (IDOR, XSS, CSRF, CORS misconfigurations, Session Based Vulnerabilities, etc.).• Technologies Used: Burpsuite, REST API, Jira, Postman, SwaggerUI, BitBucket, Confluence, Jive. Show less

Technology Associate, Information Security Architecture

• Apr 2020 - Jan 2021

Performed application security assessments following OWASP methodology (OWASP top 10)

Software Development Intern

• May 2019 - Aug 2019

• Implemented a Spring Controller that receives web-hook push notifications from a third-party API and delegates them to ActiveMQ and attached a JMS listener on the queue in order to allow a full-time developer to integrate into the project (Jira, SVN, Maven, Spring Boot, Spring JMS, Apache Camel, ActiveMQ) • Created a web application to visualize aviation route string data on Google Earth (Maven, Spring Boot, Thymeleaf, RESTful, Jackson, Apache HTTPClient, JSON) • Created log file automation process and dashboard (Logstash, ElasticSearch, Kibana) • Assigned to guide another intern throughout the summer • Organized meetings and created system diagrams to display project workflow • Participated in daily scrum (Agile) Show less