Samuel B. Johnson

DevOps Engineer

Albany, New York, United States19 yrs 6 mos experience
Highly Stable

Key Highlights

  • Expert in application security and secure software development.
  • Passionate educator with experience teaching at the university level.
  • Proven track record in risk management and security code reviews.
Stackforce AI infers this person is a Security Engineer specializing in application security within the Healthcare and Fintech sectors.

Contact

Skills

Core Skills

Web Application SecuritySecurity TestingDatabasesWeb Application Development

Other Skills

SASTPython (Programming Language)Technical WritingJavaScriptInformation SecurityJavaJ2EESQLScalaD3jQueryGoogle Closure

About

Software engineer focused on improving software and information security by working towards developing and employing practices and processes that further the development and deployment of secure software. I'm primarily interested in working to improve the overall security of the information ecosystem. That includes both facilitating the creation of secure software, and the development and deployment of tools that enable secure and reliable communication. It also includes improving security by improving awareness about security challenges and educating developers and other IT stakeholders about potential solutions to those challenges. I'm particularly interested in working on projects and developing products that have a positive social impact. I taught as an adjunct professor in the the Information Technology and Computer Science Departments at Rensselaer Polytechnic Institute (my alma mater) for eight semesters. I developed and taught two variants of a course on Database Management Systems and their use in applications, and I taught both graduate students and senior-level undergraduates. It was a rewarding experience, and teaching certainly remains a passion of mine. My background is as a developer focused on Human-Computer Interaction. My front-end experience is mainly in JavaScript (and HTML/CSS), and I have experience with several JavaScript libraries including jQuery, D3, and Bacon.js, as well as more limited knowledge of several others. I also have experience developing with Dart and SWT. My back-end experience includes work with Scala, Java, NodeJS, and Python, as well as SQL and several database systems (particularly Postgres). I have experience working in both the public and private sectors for both non-profit and for-profit companies, and much of my work since I left the Navy has focused on financial software and applications, though over the past decade, I've transitioned to the software security field and have found it to be both interesting and fulfilling. Specialties: - Customer/Client communication, Education and Training, Writing - Secure development practices: use of SAST tools, CI/CD, Secure Code Review - User Interface development: JavaScript (including jQuery, D3, Bacon.js, and NodeJs), Web Application development with J2EE (including various Java and Scala frameworks) and Python *Note to Recruiters:* For personal reasons, I am unable to leave New York's Capital Region in the foreseeable future.

Experience

Tradeweb

Application Security Architect

Aug 2024Present · 1 yr 8 mos · Remote

Paige

2 roles

Staff Application Security Engineer

Promoted

Mar 2023Jun 2024 · 1 yr 3 mos · Albany, New York Metropolitan Area · Remote

  • Member of the Platform Architecture Group: a cross-disciplinary team of staff-level engineers focused on ensuring the quality software and system architecture of Paige’s products
  • ◦ Develop and Document best practices and standards for software development at Paige
  • ◦ Review engineering teams’ proposals for the implementation of new products, services, and systems
  • ◦ Work with stakeholders throughout the company to balance competing needs and requirements
  • ◦ Advocate for secure design and appropriate security controls on all new proposals
  • Risk Management: Work with stakeholders to manage security-related risks in Paige products
  • ◦ Collaborate with Product Managers to find and document potential security risks in Paige’s software
  • products
  • ◦ Work with engineering teams to develop controls to mitigate risks and tests to verify those controls
  • ◦ Help senior leadership evaluate the potential impact of security risks, as well as the likelihood of those
  • risks being exploited
  • Continued work doing Security Code Reviews and triaging SAST and DAST results for Paige's digital pathology product.
Web Application SecuritySASTSecurity TestingDatabasesWeb Application DevelopmentPython (Programming Language)+1

Senior Application Security Engineer

Aug 2020Mar 2023 · 2 yrs 7 mos · Albany, New York Metropolitan Area · Remote

  • Implemented SAST and DAST scanning for application code in Paige's digital pathology product platform.
  • Conducted security code reviews, and worked with product managers, compliance, and engineers to ensure the software developed met security requirements.
DatabasesWeb Application SecurityJavaScriptSASTSecurity TestingInformation Security+2

Ge

Senior Cybersecurity Engineer

Mar 2017Aug 2020 · 3 yrs 5 mos · Schenectady, New York

  • Work to improve the security of GE Power's software applications and products.
  • Build internal tools to assess software quality by automating the use of SAST tools and aggregating their results
  • Work with development teams to integrate security into their SDLC and improve the security of their applications
  • Develop and conduct training to improve security awareness
DatabasesWeb Application SecurityWeb Application Development

Rensselaer polytechnic institute

Adjunct Professor

Aug 2016Dec 2021 · 5 yrs 4 mos · Troy, NY

  • I teach Database Systems both as a senior/graduate-level elective for students in the Information Technology and Web Science department, and as a senior-level elective for students in the Computer Science department.
  • The course covers the fundamentals of Relational Database Management Systems, including relational algebra, database design, data normalization, and SQL, as well as indexes, query optimization, and transaction management. We'll also touch on topics such as use of a relational database in a broader application, some basics of secure application design, semi-structured data models, and distributed databases.
Databases

Applied visions, inc.

Software Engineer

Nov 2014Mar 2017 · 2 yrs 4 mos · Clifton Park, NY

  • Developer for Code Dx, an application to facilitate the aggregation, visualization, and handling of SAST (and soon DAST) data from multiple open source and proprietary tools. Code Dx is a web application written in Scala on the server-side and makes heavy use of the D3 library on the client-side.
DatabasesWeb Application SecurityWeb Application Development

Auto/mate dealership systems

Software Engineer

May 2013Oct 2014 · 1 yr 5 mos · Albany, NY

  • Develop Java applications and web services to support all phases of the sales processes used by automobile dealerships.
DatabasesWeb Application Development

Myatt & johnson inc.

Independent Contractor

Jan 2012Jun 2014 · 2 yrs 5 mos

  • Research the viability of various web technologies (Google Closure Tools, AngularJS, Polymer, and Dart) in support of development of tools to visualize genomics data.

Factset research systems

Software Engineer

Jan 2012May 2013 · 1 yr 4 mos · Norwalk, CT

  • Develop financial analysis tools using primarily JavaScript and other web technologies.
Web Application Development

Nyiso

Software Associate Developer

Feb 2011Jan 2012 · 11 mos · Rensselaer, NY

  • Develop software for managing the auctions for Transmission Congestion Contracts, a financial instrument used to hedge against uncertainty in the cost of congestion in the wholesale electricity market in New York State.
DatabasesWeb Application Development

Nys department of tax & finance

Information Technology Specialist 2 (Programming)

Jul 2009Feb 2011 · 1 yr 7 mos · Albany, NY

  • Develop Java web applications, both client-side and EJBs to support the processing of MTCMT Taxicab Ride Fee tax returns, and the associated payments.
DatabasesWeb Application Development

Newkirk

Programmer

Oct 2008Jul 2009 · 9 mos · Albany, NY

  • Maintained and Enhanced systems that used MS SQL Server data to create Xerox Compuset files for use in printing Employee Benefits information.
Databases

United states navy

2 roles

Naval Aviator

Apr 2008Sep 2008 · 5 mos

Student Naval Aviator

Jun 2006Apr 2008 · 1 yr 10 mos

  • Attended Navy Flight School in both Pensacola and Milton FL. Responsible for quickly and accurately learning large amounts of technical information and applying that information in the high stress environment of naval aviation.

Education

Rensselaer Polytechnic Institute

MS — Information Technology

Jan 2009Jan 2011

Rensselaer Polytechnic Institute

BS — Computer Science

Jan 2002Jan 2006

Stackforce found 100+ more professionals with Web Application Security & Security Testing

Explore similar profiles based on matching skills and experience