Ed Arnold Email & Phone Number

Portland, Or, Us

Greenwich, Ct, Us

Foster City, Ca, Us

As a Subject Matter Expert/Solution Architect my role consists of assisting customers achieve success in their application security programs. This involves providing vulnerability guidance, program guidance, best practices and frequently creating scripts to automate security testing in DevOps pipelines. I am a resource for our Technical Account Managers to assist in deals and demonstrating the value of our product. I work with our engineering and QA teams to create new features and vulnerability detections.

Beaverton, Or, Us

As a member of the Red Team, created testing methodologies and refined operations. Performed web, mobile, API and thick-client security assessments. As a member of the SecureCode team, assisted in deploying automated code scanning to developers, implemented a secure SDLC framework, deployed a best practices web application, deployed systems to AWS, created capture the flag challenges as part of developer training via gamification, created team website.

Houston, Texas, Us

Responsible for creating methodologies, processes and procedures with focus on quality and consistency for a team of over 200 dynamic testers. Conduct proof of value testing to secure clients. Provide internal training in the areas of advanced web application and web

Houston, Texas, Us

Performed web application, mobile application, thick client, SAP, and mainframe security assessments for large enterprise clients. Provide internal training in the areas of advanced web application and web service testing. Team technical lead responsible for troubleshooting tester and customer concerns, researching emerging vulnerabilities and providing guidance regarding processes and procedures.

San Jose, California, Us

Performed application penetration tests of PCI-scope applications. Performed architecture security reviews and vulnerability assessment of applications involving PII and PCI/SOX compliance. Assisted in improving security operations.

San Jose, California, Us

Engagement 1: Large national ISPRevised Incident Response Plan to meet industry best practices. Developed proactive security assessments including creating shell scripts to verify system configuration and building checklists for operating systems, databases, web application and network devices. Provided procedural and product guidance related to detection of modern attack types. Assisted sales in acquiring a multi-year contract. Engagement 2: Multinational retailerPerformed web application and web service assessments for internal and external properties. Performed assessments of cloud-based software and services. Performed operating system assessment for secure builds. Performed mobile security assessments of Android applications. Assessed third-party business partners for adherence to security standards.

San Jose, California, Us

Engagement 1: Security Operations CenterMember of the Cyber Security and Analysis Center at a 24x7 cyber security operations center. Analyzed security events for numerous enterprise security devices and recommend corrective actions. Conducted forensic investigations of computer intrusions. Analysis of vulnerabilities and exploit code leading to creation of security advisories. Project manager of Local Government Vulnerability Scanning Project.Engagement 2: Security Operations CenterMember of the Security Operations Management Team. Involved in decision making regarding the direction of the operation. Managed operations at existing SOC during relocation/transition of operation. Manager of vulnerability assessment services for the MS-ISAC. Responsible for creation of procedures and assignment of work to a team of SOC analysts. Perform analysis of, and provide outreach/education regarding, web application vulnerabilities. Responsible for creation of income producing services.

Albany, New York, Us

Developed incident reporting and tracking capabilities. Developed security policies for agency use. Security training for new employees. Developed policies and procedures for forensic investigations. Conducted forensic investigations for computer misuse. Member of the state Computer Forensic Work Group, Policy and Procedure Committee. Implemented an internal and external vulnerability management process according to best practices using QualysGuard. Led deployment of Pointsec encryption.