Manage a team of 10 technical program managers (TPM) responsible for programs and strategic planning for Google's information security engineering (ISE) organization.

Run a data-driven central security engineering team that comprises assessment services (feature specific attack surface analysis and security testing), and automation and dashboard frameworks (ensuring consistent and scalable coverage of dozens of products and cloud services).Drove the creation of a secure development policy.Manage a team of over 50 engineers and a multi million dollar annual budget.Maintain a secure coding training curriculum that has successfully been rolled out to a majority of the software engineering workforce. Lead agile development of internal automation frameworks, such as a central vulnerability repository that collects scanner findings and persists triage decisions.Maintain dashboards for vulnerability tracking, SDL activity completion, status of automated tools, and compliance with a centrally curated set of security controls.Track all security engineering tasks via JIRA dashboards to ensure proper resource allocation and product coverage.In the midst of forming an assurance function to ensure quality of SDL artifacts.

Follow a risk based approach to product security by mapping key risks from the company’s risk heat map to NIST Cyber Security Framework categories. These drive product security controls and key performance indicators (KPIs) used to track improvements in the company’s security maturity. Gradually introducing security touch points into the product development life cycle of IoT and home networking products (training, threat modeling, testing tools, penetration testing, etc.).Manage potential zero-day disclosures by working collaboratively with security researchers to responsibly patch firmware and cloud based back-end software. Manage product security incident response.

Lead the corporate application security program for R&D. This is a central program that affects over 50 enterprise applications in multiple business units across several geographies.Manage a team of software security engineers (penetration testers and coders).Communicate with enterprise customers and the security research community on vulnerabilities and secure development practices.Introduced, maintained and continuously enforce application security processes such as the use of DAST, open source library scanning, penetration testing, and training of just under 50 Secure Software Practitioners - a pilot program with SecurityCompass and ISC(2).

• Managed a team of 15 technical services professionals• Was in charge of pre- and post-sale support for a multi-million dollar product line (Open Text ECM solutions)• Managed implementation projects and customer support for ECM solutions• Managed technical marketing and PR efforts for Open Text in Israel

Initiated an integrated internet and mobile phone based service. Created business model and detailed business plan, drafted user interface mockup, approached technological partners for payment clearing and mobile phone integration, funded market research project to gauge general interest, engaged advertising agency, presented to potential investors.

• Member of Technology and Architecture Group responsible for strategic and technological direction• Maintained corporate software development standards• Reviewed architecture and design of BSM solutions• Main contact for product security and secure coding standards• Managed security-related customer and security-research community relations• Acted as technology and security consultant for legal, finance, and business operations departments• Designed and collaborated on the development of a company-wide tracking system for embedded third party software

• Was responsible for company-wide software security and secure coding initiative (including design reviews, the development of training, and the development of secure coding standards)• Consultant for product ECCN filings• Managed Common Criteria (NIAP) certification engagement with external consultant• Managed security-related customer and security-research community relations

• Developed worldwide marketing activities and material• Managed cross business unit and intra business unit activities/communication• Developed and maintained partnerships with complementary service providers• Post sales support• Collaborated with members of a global team spanning the U.S., Europe, the Middle East, and the Asia Pacific regions

Developed Library Automation and Book Cataloging software (worked with Oracle databases, developed conversion and upgrade software, trained international customers, and lead a team of support-programmers)

Developed graphical systems for the display of radar-based information and for tactical mission planning

Worked with international companies on counter-trade and offset marketing agreements, developed marketing strategies for CBT product line, directly sold CBT packages to financial institutions in Europe, South Africa, and South America.