Brian Schafer Email & Phone Number

United States

Cambridge, Massachusetts, Us

New York, Us

New York, Us

Redwood City, Ca, Us

Redwood City, Ca, Us

Seattle, Wa, Us

I manage a team of Software Development Engineers that develop and maintain an internal application focused on driving application security reviews for Amazon developed software.

Seattle, Wa, Us

Information Security, Technical Program Manager

Waterloo, Ontario, Ca

Primary Functional Roles (Web Application Developer / Architect / Infrastructure Support)While in this role, I designed and implemented a security incident tracking web application to enable the workflow of the BlackBerry Security Incident Response Team. Since the initial implementation of the application, it has been extended to interact with other applications and data sources within BlackBerry to enable key initiatives of BlackBerry Product Security.In addition to these primary responsibilities, I have: - Worked with members of the BlackBerry Security Incident Response team to further define the response and malware investigation processes. - Participated in the review of security advisory and notices published by the BlackBerry Security Response Team. - Collaborated with development teams to integrate applications and systems

Redmond, Washington, Us

- While in this role, my team developed and deployed a number of process refining applications to provide a data and infrastructure framework used to automate and measure the efficiency of the day to day operations of the Microsoft Security Response Center. - Acted as a customer for a development team to build a Bulletin Content Aggregation System used to manage the monthly security bulletin releases. This role involved the gathering of business requirements, reviewing specifications and participating in the triage of reported issues with the applications. - Analyzed the MSRC Security Investigation Process to identify potential efficiencies gained through automation. These efficiencies where then translated to infrastructure projects which were developed and deployed from resources within my team. - Participated in an ICASI working group to develop an industry wide initiative known as CVRF, or the Common Vulnerability Reporting Framework. This framework will provide the means for vendors to release security communications in an XML format which lends to automation of risk assessment and remediation tools to address security related issues. - Managed two employees, a PM/Web Developer and SQL/Middle Tier Developer. - Provided Technical Support for issues related to the MSRC Tools and Infrastructure.

Houston, Texas, Us

- Organized and carried out the day to day responsibilities associated with the Vendor Disclosure side of TippingPoint’s Zero Day Initiative. - Create applications to assist in the efficient operation of the tracking tasks required to handle the numerous Vendor Disclosures for security vulnerabilities reported through the program. - Handled external reports and resolution of security vulnerabilities in both TippingPoint and 3Com products.

Redmond, Washington, Us

Microsoft Security Response Center, Security Program Manager 2004 – 2006====Managed the handling and resolution of publicly and privately reported security issues in Microsoft products. Responsibilities included but were not limited to the following: - Building relationships with members of the security community to encourage responsible disclosure. - Working with members of the Secure Windows Initiative to determine the appropriate remediation for publicly and privately reported security issues. - Managing without authority and driving resolution of security vulnerabilities in a timely fashion. - Participating in Security Incident Response processes as a MSRC Lead. This process involved determined the severity of a security threat to our customer and driving a resolution. Deliverables from the process included Advisories, Bulletins and Security Updates. - Authoring and publishing security bulletins to inform and assist customers in assessing risk to their Microsoft software implementations. - Attending conferences and participating in the security community.Product Support & Services, Security Support Engineer 2003 – 2004==== - Provided escalation support for customers experiencing security related issues. Tasks ranged from determining whether a system had been compromised as well as the likely entry point. - While on this team, I developed a C# application to automate the process of analyzing a machine for potential signs of compromise. This tool is still actively used in customer support calls. Provided support to customers who were experiencing issues with Microsoft security updates.Premier Support Engineer – Networking 2001 – 2003==== - Provided networking support to Premier customers. - Functionality supported while on this team ranged from DHCP, DNS to ISA Server.Premier/Professional Desktop Support Engineer 1999 – 2001==== - Provided front line support to customers for desktop platforms which included Win9x and WinMe.

- Provided consulting services to a large number and range of customers. - Typical assignments included building desktop and server systems from the ground up and installing networks on site.

Washington, Dc, Us

Provided medical services to patients in a wide range of situations and assignments. These assignments ranged from clinic, hospital and ambulance settings including field and overseas deployments.