Derek Mcghie Email and Phone Number

Leading a team focused on software development lifecycle security practices, acting as a champion of secure coding and delivery practices.Maintains awareness of the threat landscape along with a detailed understanding of modern application development security techniques, applying knowledge and influence to achieve application security outcomes. Works closely with Information Technology, Solutions Engineering, and other stakeholders to understand company needs and risks.

• Designed, build, and upgrades backend services and REST APIs leveraging C# and .NET, replacinglegacy functionality• Engineered and maintained a frontend application written in Angular and TypeScript, which interfaces securely with our services• Engaged with customers directly to review their existing technology and business solutions, and then used that information to design and write new integration code so their custom solutions could interface seamlessly with our product• Regularly conducted code reviews to enforce secure coding practices, provided mentorship and conducted training sessions for peers and junior developers, contributing to a culture of security-minded development within the team

• Transitioned legacy application functionality into a suite of Docker-hosted microservices using C++• Engineered and executed a series of microservices that communicated securely via Kafka, ensuring safe, reliable data transmission and minimizing potential security risks.• Developed a robust series of thread and component tests to validate interactions between services

• Leveraged Python and SQL to craft comprehensive reports from diverse datasets, ensuring data integrity, privacy, and adherence to security best practices throughout the data handling process• Spearheaded the management and implementation of multiple code projects from various developers, incorporating new features in line with an ever-evolving mission

• Conducted continuous security testing and code reviews, bolstering the security posture of bothmobile and web-based applications by leveraging SAST tools like Checkmarx• Comprehensively audited numerous code repositories, discussing identified security issues with developers and developing remediation plans, thus fostering a security-aware culture and reducing potential vulnerabilities • Utilize tools like Burp Suite to scan, exploit, and validate web application security

Develops and maintains a highly customized implementation of Salesforce.com. Develops reports, Visualforcepages, and custom workflows to meet business requirements. Develops for SFDC, the Salesforce Android Mobile SDK, and codes various other tools outside of the Salesforce environment as needed.Programming Languages Used: APEX, C#, JavaScript, and Java for Android development.

Providing software quality assurance by coding and developing an automated testing framework for software products. Uses various automation tools such as Coded UI, Selenium, to simulate user input on web applications and desktop application. Writes unit tests for web applications using Jasmine and Protractor. All automated solutions were developed using C# and .NET.Programming Languages Used: C#, JavaScript, Python