Adam Youngberg Email & Phone Number

San Francisco, Ca, Us

Managed two teams: Security Cloud Infrastructure and Security Cloud Operations, responsible for:- Hardened Azure (and EntraID) environments against NIST CSF standards- Migrated multiple acquisition-driven cloud environments into common environment, IaC management, and security hardening- Deployed common SOAR service capabilities (e.g. Slack integration, CSPM integration, intake services)- Migrated Azure and GCP cloud deployments from manual to IaC (Terraform) solution and integrated with continuous deployment solution

San Francisco, Ca, Us

Managed Security Cloud Infrastructure team, responsible for:- Established AWS GovCloud hardened environments and base services in support FedRAMP High product feature (including Config, Inspector, CloudTrail, GuardDuty, and Identity Center)- Deployed Cartography CSPM for GovCloud AWS accounts- Established AWS GovCloud hardened environments and base services in support FedRAMP High product feature (including Config, Inspector, CloudTrail, GuardDuty, and Identity Center)- Deployed SOAR platform (Tines)- Deployed and integrated Cycode, in support of Github repository vulnerability scanning- Developed custom continuous integration tooling for deployment of security resources to Cloud environments- Established Security/IT change management board, implementing ITIL best practices and a change advisory board

San Francisco, Ca, Us

- Migrated AWS access from users and roles to standardized least-privilege roles, reducing persistent admin access in production environments to near zero- Implemented automated/IAC solution to migrate from manual AWS account creation to IaC (Terraform) managed solution- Implemented public bucket scanning solution for AWS: https://www.databricks.com/blog/2020/07/16/bucket-brigade-securing-public-s3-buckets.html- Led internal hackathons (part of security awareness month)

Mclean, Va, Us

- Drove full enterprise adoption for internal tool and integration with continuous integration and delivery pipelines- Operated as technical lead and product owner for internal tool, establishing an internal customer advisory board to direct future capabilities- Developed internal enterprise dashboarding tool for Cyber data

Mclean, Va, Us

- Established a team around internal tool, matured SAST capabilities, and developed additional OAST integration: https://www.darkreading.com/application-security/taming-the-chaos-of-application-security-we-built-an-app-for-that/a/d-id/1331785- Increased SDLC SAST scanning two orders of magnitude through automation

Mclean, Va, Us

- Created an internal tool to orchestrate and aggregate SAST scanning activities adopted for use across the entirety of Capital One- Led Capital One Coders program Guiness World Records largest programming lesson: http://launchdfw.com/2016/11/04/capital-one-sets-new-guinness-world-records-title-largest-programming-lesson-724-participants/

Mclean, Va, Us

- Application security tester (DAST) responsible for internal dynamic web application testing using tools such a WebInspect, BURP Suite, and ZAP- Administered internal training course for secure developers and established annual Hacker-thon event (with training for how to hack web applications)

Mclean, Va, Us

- Home loans servicing quality assurance testing- Testing automation for home loans servicing transition