Brad Nance Email & Phone Number

Dallas, Texas, Us

Purchase, New York, Us

I lead our cybersecurity team in conducting thorough security evaluations for web applications, identifying vulnerabilities, and implementing strong mitigation measures to safeguard sensitive information. I collaborate with diverse teams to establish secure software development life cycles, coding practices, and deployment strategies, ensuring the delivery of secure web applications. I personally conduct triage of scan results using various methods such as penetration testing and code reviews across multiple programming languages, including Java, C#, JavaScript, and PHP.Key Accomplishments:• Developed and implemented secure coding standards based on OWASP top ten security controls, significantly reducing security incidents.• Enhanced Azure DevOps pipelines, integrating security scanning tools that improved application development team protocols.• Established procedures for integrating on-premises and cloud-based web applications with Imperva WAF solutions and reported application security program metrics to senior leadership.• Oversaw management of Fortify systems and infrastructure, as well as utilization of Snyk for open-source, container, and infrastructure as code scans.• Designed and executed new self-service security program that empowered developers with tools and knowledge to conduct own security scans, significantly reducing vulnerabilities.• Streamlined time-to-market for web applications by implementing efficient security protocols and training programs.

Purchase, New York, Us

I personally led security evaluations using both Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) tools for web applications and APIs. Additionally, I provided valuable guidance to development teams on addressing and understanding security issues uncovered during these assessments. Through collaboration with multidisciplinary teams, I played a key role in establishing and maintaining robust secure coding standards. This initiative resulted in significantly heightened application security and a reduction in the risks posed by potential threats. Furthermore, I conducted meticulous manual code reviews to address security scan findings across diverse programming languages, including Java, C#, JavaScript, and PHP. This hands-on approach ensured that vulnerabilities were thoroughly addressed and mitigated, contributing to the overall security posture of our applications.Key Accomplishments:• Implemented on-site security tool, eliminating reliance on external SaaS solutions, and achieving annual cost savings of over $750K.• Carried out thorough security evaluations to proactively detect and remedy vulnerabilities in systems and applications.• Designed and conducted training sessions to educate development teams on industry-best security practices, empowering with necessary expertise to create secure applications.

Purchase, New York, Us

I performed application security initiatives, ensuring the robust protection of our web applications and the integrity of our data. Along with a dedicated team, I led efforts to implement and maintain security measures, focusing on the development of secure software lifecycle practices to fortify our defenses against emerging threats. Collaborating closely with cross-functional teams, I ensured that our security protocols were aligned with organizational objectives and tailored to meet the needs of our users. By fostering this alignment, we were able to not only enhance our security posture but also maintain a seamless user experience.Key Accomplishments:• Led incorporation of internal security tools, substituting external SaaS solutions for improved system efficiency and control.• Conducted regular security assessments, penetration testing, and code reviews to identify vulnerabilities and enforce compliance standards.• Implemented cutting-edge data standards and methodologies such as OWASP Mobile Top 10, CWE, PCI-DSS, and NIS.

I successfully managed multiple web development projects simultaneously, adeptly prioritizing tasks and timelines to ensure that project deadlines were met effectively. Collaborating closely with clients, I conducted thorough analyses of their digital presence, identifying areas for improvement and implementing tailored solutions that delivered measurable return on investment (ROI). Additionally, I conducted regular code reviews and testing to identify and address bugs, ensuring that websites maintained high performance and optimal functionality. Furthermore, I provided comprehensive technical support and troubleshooting assistance to clients and end-users, resolving issues promptly and effectively to ensure a seamless user experience.Key Accomplishments:• Developed web applications utilizing PHP, ColdFusion, WordPress, and Drupal.• Led creation of new B2C SaaS product for students to assess writing for grammar and plagiarism, achieving 120K daily active users within first year.• Oversaw multiple projects concurrently, ensuring on-time delivery and client contentment, consistently surpassing project objectives.

I spearheaded the development of cutting-edge iOS mobile apps, e-books, and web applications, leading to a revolution in user experiences across multiple platforms. Additionally, I orchestrated the redesign of the Texas Instruments website, introducing a custom mobile recruiting tool. This innovative tool streamlined the acquisition of top-tier college talent, setting a new standard in recruitment efficiency.Key Accomplishments:• Guided groups of three to fifteen individuals, nurturing teamwork, and cohesion to achieve outstanding outcomes across diverse assignments.• Negotiated rates with vendor partners, optimizing resource allocation and maximizing project budgets for optimal outcomes.• Formulated comprehensive software roadmaps and strategies for online and mobile applications, guiding teams towards innovation and sustainable growth.• Pioneered digital marketing solutions tailored to unique needs of diverse businesses, driving engagement and amplifying brand visibility in crowded marketplaces.• Identified and tackled strategic challenges within filling and packing facility, implementing solutions that capitalized on untapped opportunities and propelled significant growth, resulting in expanded operations and increased staffing.

Kr

BNE, Inc. was an Information Technology consulting firm proposing solutions over a wide range of needs and issues. Worked with 20+ clients including CTX Mortgage, Nokia, Sun Microsystems, Hewlett-Packard and Intel Corporation. Assessed client needs and created technical documentation including flowcharts, wireframes, prototypes and project timelines. Provided quality assurance for both new and legacy code. Deployed sites to production environment and monitored for issues. Sites included registration applications for meetings and events. ► Consulted with a team at Intel on the need to streamline the process of inviting select executives to high-level events. Built an online application to streamline the complex nomination procedure, sending of invitations and online registration. This resulted in a more efficient process allowing organizers to focus on event itself.► Built a mobile app (iOS) that streamlined the setup and placement of desk-sized projectors when projecting a widescreen video. This is normally a complex process involving more than 20 calculations. The app quickly shows how many projectors are required and where they should be placed relative to the projector screen. Initial hopes were to sell 800 copies of the app, but sales to-date top 3,200 units. The app is useful to designers, presentation creators, salespeople, event planners and projection personnel. Two years after creation of original app, an iPad version was created to expand app usability.► Created standards-compliant custom web applications using ColdFusion, PHP, CSS, JavaScript, jQuery, AJAX, HTML, MS SQL and MySQL.

AVI Media, Inc. is a Multimedia Web Development company specializing in dynamic websites and electronic media used in online marketing campaigns and e-commerce websites. Company employed 6 employees and 3 partners. Major clients included Fortune 500 companies such as Novartis, GlaxoSmithKline and Compaq Computer.Director of all projects and responsible for full life cycle development (SDLC).► Created and built a major online portal for the event management industry. Portal was used by event planners, vendors and clients to better manage events and enable communication and collaboration.► Re-designed website for a party rental company resulting in a 30% annual increase in profit.► Re-built a major event registration site for Digital Equipment Corporation in an accelerated 2-week time period.► Co-developed ElectroMail ™, a video email product; used by Compaq, Mark Cuban, Nokia and SBC Cotton Bowl.► Developed the first e-commerce website for the fluid handling industry; diagnosed needs for and built a complex online pump sizing and ordering application; website resulted in increased worldwide sales.

Computer Information Systems

Education record