• Directed dedicated DevSecOps team, supporting a full stack hybrid environment.• Enabled cloud development teams to design a modern microservice architecture while maintaining security controls and risk-off posture.• Directed implementation and maintenance of multiple DevSecOps solutions:CI/CD Pipeline; Security Information & Event Management (SIEM); Realtime and Pipeline vulnerability scanning; IaC Static and Dynamic Code Analysis; SSO/SAML and MFA across all solutions• Helped define security policy for company.• Led company-wide Data Retention initiative.• Led group threat modeling exercises.• Applied NYDFS Cybersecurity criteria to risk evaluation.• Initial steps towards SOC2 compliance.

Linux & AIX server administration; DNS administration (InfoBlox + BIND), policy, and procedures; Apache & Tomcat administration; UNIX security assessment; risk identification and mitigation; ITSec liaison.