Alex Orlov Email and Phone Number

- Led the small (4 people) Engineering Security team, with most team members focusing on fixing and mitigating vulnerabilities in all assets managed by Engineering - our homegrown software, cloud infrastructure, access control systems, third-party software packages, databases. - Sliced and diced the vulnerability backlog, determined hiring needs from that, hired based on the shape of known work. - Did my best to make sure that the team was effective, efficient, busy, happy - mainly by applying Agile practices, planning work ahead of time, maintaining some social life for the team, facilitating helping and learning. - Served as security advocate with the larger Engineering team, constantly promoting the security concern. - Developed and drove quarterly goals and measurable objectives for myself and the team.

- Audited Appen's software, cloud infrastructure, deployment infrastructure, practices and processes from the security perspective. - Developed the "20-point inspection" - a rapid security assessment to be applied to each microservice. - Developed and maintained a backlog of documented issues, with measurement metrics helping drive focus and showing whether Engineering team is heading in the right direction in terms of security. - Learned (with varying degrees of proficiency) and used a wide variety of technologies used by Appen to fix or mitigate hundreds of vulnerabilities; - Technologies used included Ruby on Rails, Javascript / Typescript / nodejs, Python, Java / Spring, Docker / Docker Compose, AWS (IAM, ECS, EC2, Athena, RDS, Lambda and many other services), Terraform / Terragrunt, Jenkins, Postgresql, MySQL, etc.Operationalized automated vulnerability detection tools (TrendMicro's Conformity, Dependabot, AWS Inspector, GuardDuty and others)

Upgraded Viome’s deployment infrastructure with security best practices. Implemented and drove the implementation of clickjacking / spoofing / brute force attack prevention on Viome’s web applications. Implemented and managed HIPAA requirements in access control, auditability, protection of patients’ / customers’ data (PHI).

As part of Viome Engineering team, developing features in Viome’s external and internal customer-facing web / mobile applications, mostly on the back end (Scala, Play Framework). Added some front-end features (JavaScript / React / Redux). Maintained and added to relational DB schemas (PostgreSQL). Optimized the company’s AWS spending by identifying unused or underutilized resources that could be shut down or scaled down. Wrote Python scripts to automate scheduled tasks / cron jobs.

Took over technical and product management responsibilities for completing the development of Immersion's haptic video ad serving functionality. Developed and negotiated a short-term product roadmap and drove its implementation. Wrote Javascript and Python code to fix bugs and build new features. Served as the company's ad tech expert. Learned a number of technologies, mainly in the AWS realm - in addition to S3, which was the only part of AWS that I had touched before, I'm now somewhat fluent in Lambda functions (Python), DynamoDB, Elastic Beanstalk, IAM, Route 53, API Gateway.

A platform for helping companies find the right vendor for their next IT implementation, integration, outsourcing project. I've done all product management and 90% of the coding. Tech used: Ruby on Rails, PostgreSQL, Elastic Search, React.

I was hired as a technical services engineer, originally in charge of building custom integrations with Adap.tv’s partners’ and customers’ APIs (mainly Flash / ActionScript and Javascript).As the industry and the company evolved, my team and I built and supported other types of integrations as well – audience data provider, server-to-server real-time bidding (RTB) integrations, as well as tools for internal business teams – Client Services, Policy, and Finance.My abilities were recognized by a series of promotions, both in terms of job title and scope of responsibilities. In addition to Tech Services, I ended up in charge of QA and Tech Support teams as well, with some responsibilities crossing over from just Adap.tv into other technologies built by companies that AOL acquired over the years. This was a wonderful opportunity in terms of being able to learn, participate, and influence the entire product development process. A significant part of my job was training and mentoring new members, not just of my team, but other teams as well, mainly through organizing and recording product training sessions.

• CRM On Demand Integration: Designed and implemented integration and data migration solutions for multiple customers, creating integration interfaces between CRM On Demand and 3rd party applications, as well as between different instances of CRM On Demand.• CRM On Demand custom UI extensions: Designed and implemented custom applications that serve as extensions to the CRM On Demand user interface, providing functionality that is not included in the product out-of-the-box.• Integration project management: Designed the integration solutions and served as the project manager leading the implementation team, on two projects• Customer integration development support: Provided training and support to customers’ developer teams creating integration solutions for CRM On Demand

• Designed and developed custom integration solutions for Siebel CRM OnDemand.• Built custom integration and reporting solutions for the UpShot sales force automation platform.• Managed multiple projects concurrently, on average completing 15-20 customer projects per quarter.• Supported sales of Siebel CRM OnDemand by scoping custom services and suggesting implementation practices• Managed a team of contractors in a product development project building a Microsoft Office add-on solution for Siebel CRM OnDemand• The projects included ASP.NET web applications, integration interfaces, MS Office automation (Word, Excel)• System Environment: Siebel CRM OnDemand, Siebel CRM OnDemand – UpShot Edition, Web Services (SOAP), XML API (proprietory protocol), SQL, MS Office (Excel, Word), VBA, ASP.NET, IIS, C#, Java, Axis, WebSphere, Eclipse, WSAD, Microsoft Visual Studio.

Built custom integration and reporting solutions for the UpShot sales force automation platform.• Over 20 projects were implemented during the period.• The projects included ASP and ASP.NET web applications, MS Office automation.• System Environment: UpShot, XML API (proprietory protocol), SQL, MS Office (Excel, Word), VBA, ASP, ASP.NET, IIS, VBScript, C#.

Maintained the corporate Internet and Extranet sites built on Solaris/iPlanet/Oracle/Broadvisionplatform in a load-balanced environment using Java, J2EE, Struts and Broadvision APIs.• Supervised a team of contractors installing and configuring Fast Search in a Broadvision environment.• Successfully designed and implemented company intranet architecture, including a portal-based publishing engine. The solution was based on MS SQL, IIS 5.0, ASP, COM, ADO. • Provided internal end user training. • Developed an offline sales pricing configurator (Visual Basic, Access, Excel). • Used Webtrends to build intranet and Internet monthly reports. • Designed and implemented web services to facilitate interaction between KANA corporate systems and third party software products using Perl, ASP, JSP, SQL on NT and Solaris platforms. • Participated in the internal project integrating KANA Contact Center, KANA Service, KANA IQ. • Built a scheduled data transfer package between Peoplesoft/Oracle and internal SQL personnel database.