Experience

Turbify

• United States
• Internet Marketplace Platforms
• 1 - 100 Employee

• Principal Security Architect

  • Jun 2022 - Present

  ➤ Providing security guidance including security architectural reviews, source code analysis, and static analysis. ➤ Analyzing risks across the system development life cycle and recommended technologies and solutions to mitigate them. ➤ Developing effective security architecture strategies and driving awareness of security roadmaps with stakeholders. ➤ Aligning product security initiatives to enterprise architecture strategy and the company's business priorities. ➤ Leading annual PCI DSS assessments to ensure compliance is maintained for threat detection and protection. ➤ Monitoring systems for indications of threats, security breaches, or intrusions and using software tools to assist analysis. ➤ Developing and maintaining thorough, current documentation of security and disaster recovery policies and procedures. ➤ Analyzing business impact and exposure based on emerging security threats and identified vulnerabilities and risks. ➤ Safeguarding data through installation of WAFs, requiring data encryption, and implementing SAST for the enterprise. ➤ Onboarding AWS accounts into AWS Organizations and AWS Control Tower to centrally manage the accounts. ➤ Applying service control policies to detect and prevent any actions or resources from being created out of compliance. ➤ Deploying AlertLogic managed detection and response into all AWS Accounts to be alerted of any malicious activity. Show less



Verizon Small Business Essentials

• Principal Security Architect

  • Jan 2020 - Jun 2022

  ➤ Worked closely with the Identity Management team to update the corporate password policy for all of user accounts. ➤ Established standard for users to change passwords every 3 months without matching passwords from last 12 months. ➤ Onboarded all pipelines for software deployments to use JFrog Xray for Static application security testing (SAST). ➤ Wrote and implemented policy that any high or critical application vulnerabilities would block software deployment. ➤ Enforced company policy that all pipelines for software deployments must use SonarQube for source code analysis. ➤ Developed in-depth security architecture standards, frameworks. and design patterns for all layers of product security. ➤ Provided security guidance across the product system development life cycle including security architectural reviews. ➤ Communicated with stakeholders to drive awareness and understanding of security architecture roadmaps and directions. ➤ Maintained a leadership role in security infrastructure as well as acted as an ambassador for all supported assets. ➤ Acted as a subject matter expert applying a strong understanding of product roadmaps, trends, and industry practices. ➤ Drove the strategic vision to align with the overall technology target, business strategy, and standardization of assets. ➤ Identified the need for new security technology solutions and provided direction, training, and guidance for staff. Show less



Yahoo Small Business

• Sr. Site Reliability Engineer (SRE)

  • Mar 2016 - Jan 2020

  ➤ Participated in deep architectural discussions to ensure solutions are secure, highly available, and scalable in the cloud.➤ Developed project timelines, implementation specifications, system flow diagrams, documentation, and testing.➤ Assessed incoming issues, prioritized, and troubleshot appropriately as well as responded to after-hours escalations.➤ Designed, implemented, and tested disaster recovery and business continuity architecture for ongoing system support.➤ Utilized monitoring tools to proactively identify issues and trends while working closely with cross-functional partners.➤ Created and implemented new system automation for cloud platforms to provide ongoing monitoring and alerting.➤ Developed creative, practical solutions to resolve non-routine problems through analysis of application dependencies.➤ Provided guidance and technical advice to Operations team to assist in resolving medium and higher severity incidents.➤ Tracked issues through multiple ticketing systems and triaged problems to successful resolution within defined SLAs. Show less

• Escalation Engineer

  • Feb 2013 - Mar 2016

  ➤ Triaged tickets daily, prioritized which issues need attention first, and worked with SREs to resolve system-wide issues.➤ Accessed hosting and store servers and databases to resolve issues with high-grossing merchants solution accounts.➤ Mentored and trained escalation technicians and effectively resolved cases that were escalated from the team.➤ Wrote scripts in Bash and Python to automate fixes for the escalation team and provided high-level technical support.➤ Provided phone support for frontline agents and Merchant Development with troubleshooting advice and quick fixes. Show less



Various Companies

• United States
• 700 & Above Employee

• Previous Work History

  • Aug 2007 - Feb 2013

  ➤ Escalation Technician – Yahoo Small Business, Hillsboro, OR – 11/2011 to 02/2013 ➤ Merchant Development Account Specialist – Yahoo Small Business, Hillsboro, OR – 03/2010 to 10/2011 ➤ Senior Client Advocate – Yahoo Small Business, Hillsboro, OR – April 2008 - March 2010 ➤ Senior Support Representative – Stream International, Beaverton, OR – 08/2007 to 04/2008 ➤ Escalation Technician – Yahoo Small Business, Hillsboro, OR – 11/2011 to 02/2013 ➤ Merchant Development Account Specialist – Yahoo Small Business, Hillsboro, OR – 03/2010 to 10/2011 ➤ Senior Client Advocate – Yahoo Small Business, Hillsboro, OR – April 2008 - March 2010 ➤ Senior Support Representative – Stream International, Beaverton, OR – 08/2007 to 04/2008