Bethany Long Email and Phone Number

- Performing security assessments of new Heroku & Mulesoft features which consists of: --- Collaborating with engineers to get a full grasp of the engineering work--- Analyzing designs from a security mindset and identifying potential vulnerabilities--- Referencing company security standards and security best practices--- Proposing effective mitigations for vulnerabilities--- Performing a code review & security testing once engineering work is completed- Providing general security guidance to engineers- Monitoring & responding to incoming questions/requests from engineers in a timely manner- Collaborating with other security engineers on projects that promote continuous assurance

- Built a security assurance tool to scan a Github Organization consisting of thousands of repositories for potentially insecure Github Actions- Aggregated data from Github Marketplace and Internally trusted vendors & established trust requirements/levels- Wrote this tool in python, ran it on Heroku with Postgres addon, incorporated an interactive Slack bot to communicate results and get input from security team

• Holding office hours for students which entails helping them understand concepts, identifying errors in and debugging their code, and generally answering any questions they may have about course material• Assisting the professor in developing or adapting course materials• Brainstorming with the course staff on the best methods to use to conduct the course and how best to help the students learn

• Utilized multiple AWS services to automate and streamline frequently required tasks• Developed a series of operation scripts to maintain and manipulate secret data stored in HashiCorpVault, including updating a server management platform Zabbix with information about servers• B​uilt a web app with a React frontend and a Python Flask RESTful API backend. This projectallowed users to request IP addresses to be whitelisted, and fulfilled requests with an AWS Lambda script on a cron sending information from an AWS DynamoDB table to AWS WAF (Web Application Firewall)

• Used Python to parse JSON and process large datasets from a corporate RESTful API• Worked on Google Chrome extension to automatically fill website-takedown forms forphishing, domain infringement, etc.• Built web apps to display data using Flask with Python, and Spring Boot/Maven/JUnit with Java