Planned and executed proof of concept (POC) security testing of all company digital properties in the three major Cloud Service Providers: Azure, AWS, and GCP. Delivered detailed reports and managed findings to resolution.• Established a cloud security testing program.• Completed over one hundred individual cloud security engineering projects.• Authored custom tool to automate cloud security testing.• Identified and managed remediation/removal of numerous vulnerable cloud hosted servers.

Planned, scoped, and executed internal penetration tests of web applications, APIs, and medical devices. Created and maintained high quality deliverables. Coordinated remediation with stakeholders and documented results.• Completed over six hundred (web application, API, and medical device) security assessments.• Identified and remediated 50+ vulnerable servers.

Developed and implemented security validation strategies (supplier verification testing, fuzz testing, penetration testing) and supported company-wide cyber security initiatives for Uconnect Service Delivery Platform (SDP).• Actively participated in NAFTA Connectivity SDP security development efforts, participated in connected vehicle program security threat modeling, analysis, vulnerability assessment, risk management, and penetration testing.• Performed over fifty internal penetration tests on Uconnect SDP and published deliverables.• Discovered, created Proof of Concept (POC), and reported zero-day vulnerability in ATT Jasper network; affecting all Chrysler connected vehicles.• Authored automated Bluetooth testing tool for connected vehicles security testing.

Planned, scoped, and executed enterprise penetration to ensure applicable framework compliance. Published high quality deliverables and consulted during remediations.• Performed PCI penetration tests for customers in the banking, insurance, retail, and food service industry.• Provided complete security testing of SCADA (Supervisory Control and Data Acquisition) environments with no impact on operations.• Detected and assisted in the remediation of a Critical SQL injection vulnerability (SQLi), that, if undetected could have led to millions in lost revenue.