David Huckaby Email & Phone Number

Detroit, Mi, Us

Detroit, Mi, Us

Dearborn, Michigan, United States

Led initiatives to establish and refine DevSecOps processes and standards for the Ford Pro Cybersecurity team. Provided strategic guidance to developers in ongoing remediation efforts. Outlined approach for optimized vulnerability prioritization at fortune 25 scale.

Pontiac, Michigan, United States

Pioneered the development of DevSecOps at UWM, advocating for application and container security advancement throughout the Software Development Life Cycle. SME for Application Security, Container security, API Security, WAFs, Splunk, and API Automation.Designed a cutting-edge container and Kubernetes security approach aligned with CIS and NIST standards, evaluating cloud-native security solutions and deploying an industry leading platform for robust container runtime protection. Led a rapid tooling overhaul for SAST/SCA processes, conducting comprehensive evaluations and implementing a replacement within a two-month span. Delivered developer training sessions on application security best practices, automated vulnerability tracking and code repository onboarding, and participated in the Snyk Ambassador program to enhance product integrations at an enterprise level.Evaluated robust API security measures to shield UWM's critical endpoints, developed WAF security standards for defending public-facing applications, and crafted automation to significantly advance security compliance and system consistency.Developed and enforced key maintenance procedures to ensure long-term security platform resilience. Collaboratively engaged with internal IT teams to streamline cybersecurity processes and remove operational impediments.Provided mentorship in application and container security to Security Administrators, represented UWM and Sysdig as a public speaker for security initiatives, and honored with the Annual UWM Pillar Award for fostering a relationship-driven culture within the IT ecosystem.

Pontiac, Michigan, United States

Drove improvements in security infrastructure logging for network firewalls, web application firewalls, load balancers, and container security platforms, enhancing system visibility with Splunk dashboards and analytics.Developed API automation to streamline the configuration of new builds and maintenance tasks.Completed over 1400 security tickets, implementing requests from other teams across the enterprise in a timely and professional manner.Worked to continuously implement and mature the processes and procedures of Application and Container security systems.

Pontiac, Michigan, United States

Utilized Splunk Enterprise Security to audit and create security notables to be reviewed by the SOC.Aided in various security investigations by pulling reports and analyzing critical IOC logs.Created Dashboards for monitoring active vulnerability probing attempts picked up by the network IPS.Normalized data sources across the enterprise for standardization of datamodels to create more efficient and accurate queries.Audited and removed over 60 firewall rules to improve network security.

Rochester Hills, Michigan, United States

• Researched modern security defense techniques in relation to the OWASP Top 10 Web Application Security Risks• Injection Attacks, Authentication, Authorization, XSS, CSRF, Logging and Monitoring