Cameron Mccormick Email & Phone Number

Grimes, IA, US

Des Moines, Iowa, US

• Leading the application security program, developing an in-depth security architectural framework for application development including secure coding and data security standards.
• Technical point of contact for development as it relates to secure design of products being developed and deployed on-premise and into the cloud.
• Engage with senior IT and business leaders to address complex design considerations to appropriately manage risk on behalf of the company.
• Participate in full solutions lifecycle including engaging with key business stakeholders to understand requirements, performing business analysis and relaying feedback to development partners to improve future.

Des Moines, Iowa, US

• Help improve and maintain the application security program by providing guidance pertaining to secure web development design and testing. Partner with Business Systems, Solutions Delivery, Engineering, and Operations.
• Lead application security reviews, including secure code review, application design, and testing
• Develop automated testing and mature Secure SDLC
• Own and perform application security vulnerability management
• Coordinate penetration testing engagements
• Support software engineers and product teams by developing application security best practices

Des Moines, Iowa, US

• Worked with Information Security team to continue implementation of the Application Security program, performing white-box application testing and secure code reviews.
• Identify and help remediate common application vulnerabilities using a combination of SAST/DAST tools.
• Contribute to application security development projects and discussions as needed.
• Perform research on new security trends, tools, and techniques to help improve existing processes.
• Prioritize and track assigned security issues.
• Respond to security incidents, escalate appropriately when needed, work with other teams to resolve issues, and take responsibility for bringing investigations to closure.

Omaha, NE, US

• Work with the development team to integrate security best practices into the software development lifecycle, utilizing SCA, SAST, and DAST tools to regularly scan code repositories for known issues.
• Worked with multiple vendors to conduct proof of value evaluations for application security assessment suites.
• Manage application security scanning environments, working with application development leads to ensure that open vulnerabilities are addressed and that open source licensing adheres to company policies.
• Developed a BurpSuite Professional extension that handles Bearer token authentication, in order to allow OpenAPI documents to be uploaded to start active scans.
• Consulted with development teams on security practices during the re-design of the architecture of the application interface.

Omaha, NE, US

• Responsible for securing client data on the data analytics platform focusing on authentication, authorization, encryption, and tokenization.
• Assisted with designing a secure data authorization framework, ensuring that access adheres to the principle of least privilege.
• Conducted testing and deployment of the Protegrity Data Protection framework.
• Participated in a proof of concept of the Snowflake Cloud Data Platform to evaluate and test data protection use cases, including working with Microsoft Azure ExpressRoute and PrivateLink to ensure data never left the.
• Evaluated and mitigated vulnerabilities identified through scans using Dome9 Cloud Security tools.

San Jose, CA, US

• Lead technical architect for the APS Tools web and services platform supporting over 125 applications.
• Designed and built web application framework using Node and Angular 5 improving the efficiency of the development team.
• Designed CI/CD pipeline using Docker Enterprise and Jenkins.
• Integrated industry standard security practices into the web application framework.
• Partnered with the vulnerability management team to mitigate vulnerabilities in in web applications.

San Jose, CA, US

• Systems Administrator for internal infrastructure supporting internal tools used by more than 10,000 users in Global Operations.
• Supported and maintained legacy WIndows Server environment including IIS and Microsoft SQL Server.
• Lead project to design a highly available Linux infrastructure while providing same quality of service across multiple regions.
• Deployed and supported a Splunk Enterprise cluster for log collection and monitoring.

San Jose, CA, US

• Built and supported multiple tools used within Global Operations to automate tasks increasing efficiencies and consistency.
• Full-stack web development using Microsoft SQL Server, PHP, and Javascript.
• Developed and maintained desktop application written in C# utilizing low-level keyboard hooks to activate global hotkeys.
• Deployed web services using the Slim Framework.

San Jose, CA, US

Handled escalated customer contacts regarding a wide array of topics from buyer/seller disputes, fraud investigations, and website troubleshooting. Also assists customer agents with questions regarding customer accounts.

San Jose, CA, US

Reviewed customer accounts using analytical skills to determine if transaction involved fraud and take action if necessary.

Bachelor Of Science (B.A.Sc.), Information Systems Security

Associate Of Applied Science (A.S.), Information Systems Administration