Clovis N. Email & Phone Number

Texas, United States

• Integrate SLF4J to a GitHub bootstrap Repository to be used by the QA team• Performing Dynamic Analysis for web server using Nikto to scan for dangerous files/programs, and weak configurations.• CI/CD jobs for running Automation regression and sanity automation suite. • Setup full CI/CD pipelines using TeamCity so that each commit a developer makes will go through their code and help them setting up jobs which can make use of CI/CD environment.• Working extensively with software development teams to review the source code, triage the security vulnerabilities generated by IBM AppScan, BurpSuite, HP WebInspect, HP Fortify and eliminated false positives.• Worked on Docker container to create Docker images for different environments• Reviewing security vulnerability reports for applications and databases, analyzed, and worked extensively with the development teams for the implementation of mitigating controls• Create baseline files to use for false-positive analysis during SAST scans• Providing continuous testing with selenium testing which involves end-to-end , API and UI frameworks• Integrated Browserstack with TeamCity and with GitHub Actions. Integrated browserstack to be part of CICD pipeline so that after deployment browserstack will be triggered.

Massachusetts, United States

• Was responsible for taking the source code and compiling using Maven and package it in its distributable format such as a WAR file.• Reviewed source code (Java/J2EE/Spring/FTL/JavaScript) and developed security filters within IBM AppScan for critical applications• Used Shell scripts to day-to-day activities and tasks for automating.• Implemented Secure Software Development Life Cycle (S-SDLC) processes; developed secure coding practices for web, mobile applications, including database and middleware systems.• Managed security assessments for various types of Operating Systems (O/S) used by the firm. The security audits of RedHat Linux, Oracle Solaris, Windows (including Active Directory) and IBM AIX were conducted. Several control enhancements, specifically, on the patch management process, were recommended.• Use Terraform to manage multi-cloud requirement for different demos and test environments; setting up the entire environment in a few minutes with the exact configuration in AWS, Azure, and GCP, along with other setups like a database, Kubernetes.• Automate scripts and implement operations best practices for virtualization environments• Test and troubleshoot migrated systems on virtualized architecture• Built and Deployed Docker containers to break up monolithic app into microservices, improving developer workflow, increasing scalability, and optimizing speed.• Managed servers on the AWS platform instances using Chef Configuration management• Managed local deployments in Kubernetes, creating local cluster and applications deployment into containers.• Managed infrastructure automation using Terraform

• Oversaw and maintained 60+ mixed server environments including Windows, Unix, and Linux while ensuring 99.9% uptime• Managed security assessments for various types of Operating Systems (O/S) used by the firm. The security audits of RedHat Linux, Oracle Solaris, Windows (including Active Directory) and IBM AIX were conducted. Several control enhancements, specifically, on the patch management process, were recommended.• Administer cloud system through patches, permissions, and service deployments• Used metrics to monitor application and infrastructure performance