Andrew Herd Email & Phone Number

Louisville, Kentucky, Us

Web App/API/DNS Exfiltration/Mainframe/AI Penetration TestsTechnical Scope ReviewQA ReportsRemediation TestingAdded new issues to Vulnerability Library

London, Gb

Perform manual testing for Web Application & API Penetration TestingHeavily relied on Burp Suite Professional for manual testingDevelop custom Proof-of-Concepts for attacksPerform automated assessments using tools such as Nessus and QualysWork with the client to remediate and verify the remediationsWork on improvements for providing security services, including the continuous enhancement of existing methodology material and supporting assetsDevelop testing scripts and procedures

Fayetteville, Arkansas, Us

Conducted interviews, hiring, and onboarding for new team membersGave career guidance, performance improvement, and built learning paths per team member to meet their career goals and business needs Planned and hosted team-building exercises to help keep the remote team connected ( switched to work from home from 2020 on )Built internal custom Kanban board and Project Management ReportingSetup and lead weekly SCRUM, retrospective, and change control meetingsArchitected Data Warehouse for Financial/Operations Reporting with slowly changing dimensionsMigrated SQL Server, Websites, and automations to new on-premise Servers and upgraded licensesBuilt a Knowledge Base AI Chat Bot using Azure Cognitive ServicesSystem Updates for Viewpoint by VistaLead transition from Tortoise SVN to Azure ReposMigrated on-premise servers to Azure Virtual Machines for IIS and SQL ServerBuilt out Dev, QA, and Production Virtual Networks in Azure with Gateways to office networkCreated Automation Accounts and Runbooks to schedule Virtual Machine start/stop times Wrote a PowerShell script to execute runbooks and granted Developers AD Group accessRemoved username/passwords from Git repositories by implementing User Secrets and Server Environment Variables for all C#/.NET projectsBuilt out servers in Azure for Matillion to connect to Azure Synapse and SnowflakeCreated Linux instances to host multiple websites in AWS LightsailAutomated API unit-testing with Burp SuiteScheduled vulnerability scans and wrote Penetration Testing reports with tools such as Burp Suite, OWASP Zap, and OpenVASConducted internal Red Team Exercises

Fayetteville, Arkansas, Us

Software ArchitectBuilt out several MVC ApplicationsInstalled Web Certificates to externalize Web SitesCreated DNS Records for our internal DNSAutomate Employees in Organizational Units within Active DirectoryAdded Google Single Sign-On to our Web PortalsManage Projects for 3 Internal Employees and 3 External Subcontractors Developed/Scoped a Roadmap of our Projects for Senior Leadership teamAdmin over our SVN Repository through CloudForgeMicrosoft SQL Database Administrator

Fayetteville, Arkansas, Us

Created HR System from ground-up: Designed ERD, Built out Web Applications for CRUD/Reporting, converted Paper forms to Web Pages, built out Position, Management, Employment, and Review historyCreated SSRS Reports and was Portal AdminIIS ManagementBuilt HR Dashboard showing Attrition, Hours, Active Counts, and an Organizational ChartCreating/Maintaining SQL Stored ProceduresBuilt ETL automation to pull data from QuickBase/ZenDesk/Big Roads/Fleet Complete for ReportingAutomate Employees within Email groups using Google APIs in c#

Lowell, Ar, Us

• Created over a dozen Intranet Portals using ASP.NET, C#, CSS, HTML, jQuery, JavaScript from start to finish (data quality analysis, data validation and analytics, database modeling, ETL data migration, and website front and back-end work) a) Interactive web application that allows managers to set goals, expectations, and feedback for their employees each month and is electronically signed. b) Personal performance portal for each employee highlighting their operational statistics and trends, personal photo, and a radar chart with their ranking. c) Near Real Time reporting on operations to help make quick business decisions d) Web portal that displays drivers most likely to terminate and allow input from managers for the retention review. A reporting page gives trends and correlations to review responses and terminations.• Create SSIS packages for ETL working with SQL Server, DB2, and Oracle• Create Reports using DB2 SQL, SQL Server, SSRS, and ASP.NET pages for Internal Business Contacts, Executives, and External Customers • Data Modeling based on Star Schema using fact and dimension tables• Built metrics designed for employee Scorecards based on performance for several various job titles• Worked on Predictive models for drivers most likely to term or have an accident• Started and Implemented best security practices guarding against SQL Injection, bogus file uploads, Cross Site Scripting, Hash/Salt, and Encryption methods for parameters• Built solutions for integrating MicroStrategy reports, SSRS, PHP, and ASP.NET into a seamless intranet portal• Used MicroSoft .net charting tools, Dundas, FusionCharts, HighCharts, amcharts, jQuery datatables, and Leaflet as an interactive design for Data Visualization• Wrote a program that diagnoses engine fault codes and emails the computer in the truck that reads to the driver the fault code and severity level. This has saved the company over $500,000

Lowell, Ar, Us

• Intranet HR Sites Support & Maintenance, Annual Reviews Intranet Portal Support & Maintenance• Develop and maintain websites using PHP, ASP.NET, CSS, C#, HTML, jQuery, JavaScript• Create Reports using DB2 SQL, Excel, Access, and WorkDay• Design and build data tables with IBM DB2 Database using QMF, Toad, and Access• Created reports using Java for daily driver IC termination counts and automate email with attached report through Lotus Notes• Automated Month End Reports for Business Units and created intranet pages displaying results with history search capabilities• Created Search engines in PHP and ASP.NET and created a Web Crawler/Spider for ASP.NET websites• Worked on transition of PeopleSoft to WorkDay: data validation, rebuilding reports, scoping data, etc