Kirk Rasmussen Email and Phone Number

The Security Point of Contact (SPOC) is a professional security resource representing each component within a product family. Requirements for the SPOC role include:* Senior level developer with a thorough knowledge of good design and coding practices.* In-depth knowledge of the represented component as well as knowledge of how the component fits in to the final product.* Have the time to address all their responsibilities in a timely manner on an ongoing basis moving forward for all products in their area of responsibility.* Have a position that allows effective escalations within their organization.* Respect of peers (team members) for product knowledge and technical abilities; ability to influence the team.* Ability to act as the “security mentor” and primary contact to the development team.* Ability to work with Release Management and QA teams (for major releases Release Management may involve the SPOC to get Security Bugs resolved in a timely manner).* Communication skills to facilitate compliance issues and security vulnerability handling with the team, the Security Lead and GPS as required.* Working knowledge of security assurance practices, including secure development practices, security testing and tools, existing security vulnerabilities, and emerging threats, or a strong desire to acquire this knowledge by taking the SPOC training.* Ability to stay current on OSSA by attending SPOC events and training sessions, reading the newsletters and following relevant distribution lists.* Solid understanding of the Oracle Secure Coding Standards, particularly the mandates that apply to his/her product or component.* Thorough knowledge of the requirements of the Oracle Software Security Assurance (OSSA) program.

Internal Job transfer to Oracle CPQ (aka Big Machines)

* Solution lead on PerformanceTracker™ which is a cloud-based tool that makes it easy to capture, centralize, and analyze data-rich performance evaluations of contractors and suppliers to facilitate informed decisions, decrease risk, and lower costs.* PerformanceTracker™ is based on Java 8, JBoss EAP 6, Spring 4, JPA/Hibernate, MS SQL Server 2014, RabbitMQ, RESTful architecture, and cutting edge front-end HTML 5 technologies such as a custom Bootstrap theme, KendoUI and AngularJS / JavaScript.* Held numerous Lunch & Learn sessions to teach topics such as SOLID engineering principals, Domain Driven Design, Model View Presenter, TDD techniques, writing modular software (e.g. Enterprise OSGi), and how to write maintainable JavaScript using design patterns and TDD/BDD techniques.* Collaborated with Enterprise Architecture group to define Enterprise standards such as REST API Web Service and messaging interfaces.* Designed and implemented reliable Enterprise PCI compliant Credit Payment Processor via our partner Authorize.Net gateway. * Migrated existing PQM solution from legacy heavyweight IBM Portlet /Process Server implementation to a leaner JBoss EAP 6 & Spring based solution leading to decreased complexity and much increased performance overall.* Refactored major subsystems of PQM (subscription, payment processing, and service layer dependency injection) using Refactoring to Patterns techniques. Introduced Model View Presenter pattern in conjunction with the Vaadin Web Application Framework to simplify web tier development and increase testability. * Designed and implemented reusable Form Builder DSL for generating various PDF / HTML forms used within Java applications. Forms are designed using an easy to use DSL to describe form elements (e.g. headers, paragraphs, field groups, tables, etc.). The Form Builder implementation uses a number of GoF design patterns.

* Co-architect for SGA (Shock Generator Application) which provides a comprehensive and consistent suite of shock market time series as part of the Enterprise Stress Test initiative for managing risk to the entire bank's multi-billion dollar portfolio.* Due to SGA's rigid data retention policies mandated by the US Government the entity object model was paired with a custom innovative Content-addressable storage version control infrastructure inspired by Git.* Responsible for designing and implementing several major SGA components with a team of 7developers with a heavy emphasis on the User Interface, Regression Engine, and external SOAendpoints. The project followed Domain Driven Design principles along with Test DrivenDevelopment as much as possible.* Technologies include Spring 3.0, Hibernate 3.2, GWT 2.x with GXT, Jakarta Commons, JAXWS/RESTful SOA web services, Mockito, TestNG, Oracle 11g, SQLite, MS Excel, Gradle with Hudson for continuous integration, Tomcat, and VMware.

* Lead developer on FLEXnet Compliance Monitor which is a core component in Acresso Software‘sEntitlement Relationship Management Solution.* FLEXnet Compliance Monitor provides a comprehensive, accurate view of how customers use their software. It gives an organization the opportunity to monetize overuse and unauthorized use, while its customers gain a clear understanding of their own usage without the hassle of physical audits.* Responsible for designing and implementing the Compliance Monitor components with a team of 4 developers. * Technologies include Spring 2.5, Hibernate 3.2, Struts 2.0, YUI, Axis/SWS SOA webservices, JBoss 4.2, and Cognos 8.3.

* Responsible for helping architect and implement a real-time trade reporting engine for the backoffice with a team of 8 developers. Technologies include Sonic JMS, Weblogic 9.2, MDBs, Spring,Hibernate, Acegi, Struts, XML, and Groovy.* Responsible for maintaining, adding new features, and overall improving legacy real-time customerand issuer database. Diagnosed and fixed a number of hard to find concurrency issues whichreduced the number of support calls from several a week to once in a few months. Technologiesinclude Weblogic, BES, Sonic JMS, Axis, EJB, TOPLink, Struts and JSP.* Introduced a number of software frameworks to the development group to improve testability andproductivity including Spring, Hibernate, Groovy, and Freemarker.* Provided guidance to adopt the Confluence Enterprise Wiki as our main documentation system.

* Responsible for re-architecting the Lucas Online (e.g. starwars.com, lucasarts.com, andindianajones.com) technology in order to meet the heavy demands of our movie fans.* Introduced key software engineering processes such as Use Case, design patterns, configurationmanagement, build scripts, Java IDE, debugging, logging, and documentation standards. Switchingto CMP from hand-crafted JDBC statements reduced development time up to 80%.* Defined technical criteria for recruiting candidates and made hiring recommendations tomanagement which resulted in the hiring of the other Java engineer on staff for Lucas Online. I alsoprovided leadership and mentoring to other developers at Lucasfilm and other Lucas companies.Hyperspace – launched a subscription based fan club with many exclusive community onlinefeatures such as blogs, forums, celebrity chats, webcam, collecting database, polls, and much more which were developed by our team.Star Wars Shop – provided consulting for marketing department to interview and evaluate 3potential Star Wars Shop replacement partners after highly publicized security issue was uncoveredwith existing shop partner.Sam & Max 2 Prototype – developed a DRM prototype for Sam & Max 2 for LucasArts using theYummy SOAP API which integrated with the Lucas Online registration database. Also developed anetworking cost based model using simulation for estimating distribution costs of content.Webcam – developed a custom webcam application that was used during Episode 3 productionwhich scaled to thousands of concurrent users and featured search capability by time index andautomatic replay.Lucasfilm CMS – developed a CMS system for Lucasfilm based on XML and the Freemarkertemplating language.Postal – developed a sophisticated bulk mail application for efficiently sending out e-mail tomillions of registered users.CargoBay Site – developed an online collector's database which allows fans to track collectibles.