Brian Barber -. Email & Phone Number

Mclean, Virginia, Us

Boston, Massachusetts, Us

Auburn, Al, Us

• Lead Application and Development Security activities• Oversee App Layer Vulnerability and Risk Assessments, Mitigation, and Management efforts• Application Penetration, Dynamic, and Manual Security Testing • Application Discovery and Mapping using containerized tools (Docker/Linux)• Governance, Risk, and Compliance efforts including vendor risk assessments• Security Assessment Training using various tools and techniques

Burlington, Ma, Us

- DIACAP to RMF migration - Secure SDLC / Secure DevOps / DevSecOps consultant - Waterfall to Agile migration- Continuous Monitoring / Testing in accordance with Terms and Conditions of ATO - Application Layer Security assessments- IaaS and Cloud environment security - Healthcare/Privacy data security compliance (PII, PHI, HIPAA, RMF Privacy Overlay) - App Vulnerability, and RMF Controls Assessor (eMASS, ACAS, HP Fortify, Checkmarx) - Incident Response and Contingency Planning to meet FISMA requirements

Mclean, Va, Us

• Software and Systems Engineering in support of a government identity management system• Develop user identity management systems using C#, .NET 4.5, PL/SQL, Oracle 11g/12c and Microsoft Forefront Identity Manager• Active Directory and LDAP configuration and administration using Softerra• Build and deploy secure solutions using Agile methodology with emphasis on software security, DevOps, continuous improvement, and systems/process optimization• Strong emphasis on software and information security – Hold 3 security certifications and serve as secure SDLC/InfoSec SME (BitLocker, Oracle Transparent Data Encryption, ACAS Scan support)

Johns Creek, Ga, Us

• Member of the USAF Application Software Assurance Center of Excellence (ASACoE) software security team• Completed software security assessments by performing source code analysis, penetration tests, software design and architectural review, application reverse engineering, vulnerability triage, Fortify rule/filter creation, and database vulnerability assessments• Software assurance assessments performed with HP Fortify SCA/SSC, IBM Security AppScan Standard, Trustwave App Detective Pro and manual code analysis• Training and mentoring development and test staff in the use of the assessment tools as well as offering guidance on best practices and suggested improvements for securing the SDLC• Performed research and reported on the latest and emerging software vulnerabilities • Application performance and efficiency analysis with the goal of improved code quality and cost savings• Performed follow-up assessments to determine improvement in the level of software security (vulnerabilities per lines of code) and application performance over time• Provided technical support for the required tools, including installation, configuration, use, troubleshooting, customization, data collection, and reporting• Strong SDLC experience on various lifecycles, such as Waterfall, Agile, and hybrid methodologies

- Oracle Application Express development, PL/SQL, Oracle 11g database management- Maintain existing systems for HDI Solutions (.NET, MS SQL Server, VB, C#) - Java EE development with IBM DB2 database for Sanovia HID- left in August 2011, returned October 2012 to present

Us

C# .NET MVC Development, Entity Framework 4, Government Services, working under US Dept of Transportation.

New Port Richey, Fl, Us

C# .NET MVC Development, Entity Framework 4, Government Services

Atlanta, Ga, Us

ASP.NET C# Web Application Development, Government Services• Visual Studios 2010 (C#.NET)• SQL Server 2008 r2 Database management• Project and configuration management • Responsible for team of four developers

Falls Church, Virginia, Us

J2EE Development, USAF Contract• Java Enterprise Edition 6 • Enterprise Java Beans, Java Server Faces• Oracle Database 11g accessed via Toad• Enterprise Resource Management system for USAF

• Rich Internet Applications development using the .NET framework (ASP.NET, VB, C#, AJAX,JavaScript, and XML)• Participated in the development, release, and maintenance of a Web-basedMission-Critical CAD (Computer Aided Dispatch) and case management system for Lee CountySheriff’s Office (Alabama)• Data-driven solutions for government information management (maintain and enhance Alabama’sMandatory Liability Insurance system, other contracts with state governments across the U.S.)• Multiple projects for state law-enforcement agencies• Actively participate in planning and prototyping sessions for new and existing software solutions• Strong interface, web form, and visual design• Developed the Change Management procedure used company-wide• Primarily responsible for Help Documentation creation and maintenance for all current projects

Database-driven Web development - Progressive redesign of user interface including rapid prototyping of concepts, implementation and testing.Administer Oracle Portal Application Server - Configure web portal with SSO (Single Sign On) for multiple web applications. Java development using Object Oriented Programming principles.Successfully completed 23 Stanley University courses covering Java, UNIX, and Oracle 10g. Software testing and process improvement. Creation of script files and applets for web services.Promoted with additional Java development responsibilities on May 2, 2009.

Stamford, Ct, Us

Customized solutions using Visual Basic, VBScript, VBA (Microsoft .NET Framework)Data-driven solutions using SQL Server, ADO, ASP.NET, ODBC and XMLConfiguration and installation of software for Pitney Bowes mailing systemsWorked primarily from home office with occasional travel to customer sites for installs and training.This position, along with 15 others, was eliminated effective December 17, 2008 as part of the company's restructure planAccepted transfer to Field Service position

Atlanta, Ga, Us

SouthernLINC Wireless (A Southern Company), Dothan, AL• Technology sales and customer support• Motorola IDEN hardware and software support using Motorola RSS Software• Provide hands-on technical training to customers using SouthernLINC Wireless advanced data services• Support for Java-based (J2ME) Motorola phones• Perform basic repair on Motorola IDEN handsets• Research and development of Java-based applications for mobile devices (self-directed)Earned top sales award for highest sales in company Q4 2007

• Technology sales and customer support• Provided technical support on cellular handsets from various manufacturers• Performed basic IT hardware and software support• Performed basic web development for business owner’s startup company using Microsoft FrontPage

Ripon, Wi, Us

Installed and replaced electric motors on commercial washing machine assembly lineWorked in fast-paced team-oriented environmentAlso installed digital satellite systems for Dish Network contractor during this timeHeld Field Service Specialist certification with Dish Network during 2005

• Worked as Associate Pastor of youth and music ministries at churches in VA, MS, and AL • Assisted Senior Pastor with overall church administration, attended board meetings• Accomplished public speaker, singer and musician (piano and guitar)• Coordinated youth conferences and community-wide events• Performed IT software and hardware support for church office• Nonprofit website development using Microsoft FrontPage• Designed graphics and logos for youth ministry

Bachelor Of Science (Bs), Information Technology

A.A.S, Computer Information Science / Computer Programming

Aa, Ethics, Administration