David Destefano Email & Phone Number

Colorado Springs, Colorado, Us

• Team Leadership: Leads and mentors a Senior Application Engineer and Application Engineer team, fostering a collaborative and security-focused work environment.• Security Testing: Conduct comprehensive manual and automated application security testing using tools such as OWASP ZAP, BurpSuite, and Veracode.• Code Review & Cloud Security: Perform detailed code reviews and cloud infrastructure assessments, ensuring adherence to security design standards and reducing potential risks by 25%.• Risk Assessment: Execute thorough risk assessments for applications and solutions, present clear and actionable risk mitigation strategies to business stakeholders, and enhance overall security posture.• Training & Development: Administer annual Secure Coding Training using Veracode Security Labs, improving the development team’s understanding of security best practices and reducing security incidents by 15%.• CI/CD Integration: Develop and implement Azure CI/CD pipeline YAML integrations, streamlining deployment processes and increasing deployment efficiency by 20%.• Vendor Security: Conduct security assessments of third-party vendors, ensuring they meet stringent security requirements and mitigate supply chain risks.

Monroe, La, Us

• Vendor Risk Management: Developed comprehensive Vendor Risk Assessment and Monitoring tools within the Keylight GRC platform, improving vendor security compliance and reducing assessment time by 40%.• API Integrations: Created API integrations between Keylight and SAP platforms, automating the ingestion of vendor data and enhancing data accuracy by 30%.• Workflow Optimization: Designed and implemented new workflows, streamlining data access and reporting for multiple teams, including Governance Risk and Compliance, Information Security Compliance, Procurement, and Business Continuity Management.• Project Management: Led multiple concurrent projects from design to deployment, ensuring timely delivery and alignment with business objectives.

Monroe, La, Us

• Platform Management: Managed the LockPath KeyLight Governance, Risk, and Compliance (GRC) platform, ensuring continuous compliance and reducing audit preparation time by 25%.• Automation Solutions: Developed and deployed automation tools and processes using PowerShell and C#, reducing manual efforts by 75% and enhancing reporting accuracy.• Integration Development: Created solutions that integrated Keylight with SharePoint and other platforms, improving workflow efficiency and data management.

Monroe, La, Us

• PCI Compliance Program Management: Program Manager for Enterprise PCI Compliance programs, overseeing internal assessments and gap analysis, leading to 100% compliance on all audits.• Audit Coordination: Coordinated all external PCI audits for multi-billion-dollar business units, managing evidence validation, interview scheduling, and remediation tracking, resulting in successful compliance within budget and timeline.• Mentorship: Mentored junior members and interns, fostering a knowledgeable and skilled team environment.

Monroe, La, Us

• Vulnerability Management: Scheduled and performed vulnerability scans, documented processes, and developed automated solutions using PowerShell/.NET and Python scripting, increasing scan efficiency by 50%.• Compliance and Documentation: Ensured all scanning and documentation to ensure compliance with PCI DSS requirements, producing thorough auditing documentation for PCI auditors.

Melbourne, Florida, Us

• Team Management: Led IT team members in troubleshooting network security, servers, and desktop support, enhancing team performance and issue resolution speed.• Network and System Integrity: Ensured network, system, and data availability and integrity through preventative maintenance and upgrades. Conducted traffic analysis and log parsing, including packet sniffing, to generate detailed traffic reports, aiding in network performance optimization.• Policy Implementation: Implemented company policies, technical procedures, and standards to preserve data integrity and security, reducing data breaches by 25%.• Automation Development: Developed automation solutions for SolarWinds ORION, ConnectWise Professional Services Automation Platform, and LabTech Remote Management and Monitoring.• Healthcare Security Standards: Maintained healthcare security standards and practices for medical managed services customers, ensuring compliance with industry regulations.• Network Monitoring: Managed firewall, network, and server monitoring on-site and off-site, ensuring robust security and performance.• Intrusion Detection and Penetration Testing: Performed intrusion detection and penetration testing using various software/hardware solutions, identifying vulnerabilities and strengthening security measures.

Orlando, Fl, Us

• Technology Management: Directed the daily operations of the primary data center and two satellite offices, ensuring optimal performance and reliability of IT infrastructure.• Contract Negotiation: Successfully managed and negotiated technology-related agreements and contracts, resulting in cost savings and improved service levels.• Customer Portal Development: Designed and implemented a customer portal integrating data from multiple platforms into a single interface, enhancing user experience and accessibility.• Interface Integration: Developed tools for integrating DICOM and HL7 interfaces, creating centralized reporting applications that streamlined workflows and reduced reporting time by 30%.• Policy Implementation: Established and enforced company policies, technical procedures, and standards for data integrity and security, reducing data breaches by 20%.• Network and Security Management: Managed firewall, network, and server monitoring, both on-site and off-site, ensuring network performance and security.• Performance Monitoring: Monitored network performance and provided statistical reports for real-time and historical measurements, enabling proactive issue resolution.• Virtualization: Leveraged virtualization technologies to enhance performance and reduce management costs of production platforms by 25%.• Information System Implementations: Led multiple enterprise-wide information system implementations, coordinating with third-party vendor project managers to ensure successful deployment.• Automation Workflows: Designed automation workflows for document capture and sorting and data acquisition between radiology image capture devices and end-point radiologist workstations, increasing efficiency by 40%.

Us

Portland, Or, Us

Network Administrator

Melbourne, Florida, Us

Master'S Degree, Cybersecurity

Bachelor Of Science (Bs), Information Technology

Associate Of Arts (Aa), General Studies