Jan 2018 – Mar 2022 · 4 yrs 2 mos · Greater Chicago Area

• Co-Lead on expansion of Threat Modeling Program and adoption across the enterprise
• Work closely with application development and platform teams to formulate and implement a strategy for software security tailored to the specific risks of the organization, including threat modeling and application security advisement services
• Provide secure application development training to developers
• Support security tools integrated into our CICD pipeline and triage and work with Developer teams to mitigate vulnerabilities
• Work closely with Developers, Directors, BISO (Business Information Security Officer), Governance and Risk Management to ensure that application security architecture conforms to Enterprise Policy
• Perform code review, security feature and design review for all applications
• Led Proof of Concept to evaluate Mobile Security Testing
• Coordinated third-party vendor security tests in bug bounty program

Jan 1996 – Jan 2001 · 5 yrs · Chicago

• Developed and managed Company's intranet and extranet using HTML, JavaScript, SQL and Perl to access Oracle database to provide current sales data to the sales reps as well as the company’s executives based on selected criteria.