Christopher Duenas Email & Phone Number

Antioch, Ca, Us

Antioch, Ca, Us

Austin, Texas, Us

Improved the security posture of Indeed products by performing penetration tests and vulnerability assessments on various products and common services.- Proposed and documented the initial formalized penetration testing processes.- Onboarded a new vulnerability management system used by the penetration testing team to automate steps in the penetration testing process.- Evangelized the penetration testing services provided by the penetration testing team to product engineering teams, leading to more engagement with product teams.- Automated metrics reports to give upper management better insight into the security posture of various Indeed products.- Performed penetration tests and design reviews against various Indeed products

New York, New York , Us

San Francisco, California, Us

Improved the security posture of OODA Health's software engineering processes by helping to establish OODA Health's security program from the beginning.- Automated several software security scanning tools, such as SAST, DAST, Dependency, Docker Container, and OSS License scanning tools.- Influenced the Engineering organization to accept Vulnerability remediation SLAs based on the severity of the vulnerabilities.- Discovered several vulnerabilities and exposures in OODA products by performing manual offensive security tests focused on key product features.- Recommended remediations, established acceptance criteria, and performed reviews for fixes of all discovered vulnerabilities.- Established general security requirements for all features in OODA products and advocated for more rigorous security reviews around product features and test plans.- Assisted Compliance by generating policy documentation and gathering evidence for audits for SOC2 and HITRUST compliance- Performed training sessions based around security topics for a software engineering audience. Topics included: OWASP Top 10 and CSRF attacks.

San Francisco, California, Us

Improved the security posture of Riverbed’s product portfolio by proactively investigating, verifying, assessing, and reporting on security vulnerabilities found. Established and enforced security best practices throughout the SDLC.- Worked with both internal and external groups in a variety of roles including: conducting security focused reviews of requirements and code changes; writing customer facing guides and articles; conducting engineering training sessions on topics including cryptography and PKI concepts.- Performed a gap analysis on the SteelConnect product line against the requirements outlined in the NIAP collaborative Protection Profile for Network Devices.- Developed and enhanced automation tools, including implementing automated search of the NVD for vulnerabilities in third party software, and automation of vulnerability and network port scans.- Implemented a proof of concept exploit of CVE-2018-5391 (FragmentSmack) against Riverbed products.

San Jose, California, Us

- Worked with a partner FIPS certified lab to add customer's operating environments to Mocana's FIPS 140-2 certificate.- Delivered Mocana's FIPS certified cryptographic library to customers.- Helped add architecture to Mocana's IOT security platform to allow customers to more seamlessly use the platform to access certain functions of TPM 1.2 chips.- Developed command line tools to allow customers to access functionality of TPM 1.2 chips.- Provided professional service work to customer's needing help integrating Mocana's IOT security platform into their products.- Assisted customers with support escalations.- Assisted sales team as a Sales Engineer during pre-sales discussions.- Conducted internal training sessions for colleagues that needed training to use Mocana's IOT security platform.

San Jose, California, Us

- Provided email and phone support to customer's using the Mocana IOT platform.- Travelled to customer sites to assist them in setting up test environments using the Mocana IOT platform.- Conducted training sessions for customers that needed help with the Mocana IOT platform.- Fixed numerous bugs reported by customers.- Added small features to the Mocana IOT platform requested by customers.- Delivered source code packages to customers that purchased products from the Mocana IOT platform.- Constructed patches for customers needing critical bug fixes.- Assisted Sales team by answering technical questions from customers in pre-sales discussions.