Edward M. E. Email & Phone Number

Illinois, United States

Chicago, Illinois, United States

• Conducted and managed dynamic and static code scans of United applications for identifying vulnerabilities• Acted as a resource for development teams in the remediation of vulnerabilities discovered by Vulnerability Management, Application Security, or outside vendors.• Conducted proactive risk assessments of existing applications to identify new vulnerabilities.• Designed version controlled template using TeamCity CI/CD pipeline to manage SAST/DAST scans in the DevOps process.• Developed training and remediation materials on application security topics for developers.• Kept up to date on application security topics to ensure United’s processes are finding the more current vulnerabilities• Reported metrics on SAST/DAST scan results to leadership• Leveraged metrics from findings to suggest better processes and tooling to leadership

Libertyville, Illinois, United States

Performed advanced Web application source code auditing and Dynamic scanning with HCL AppScan Analyzed codes, writing scripts, and manually tested vulnerabilities reported by automated scans using Burp Intruder Designed version controlled IAAS template in CloudFormation Pipeline as code (CI/CD) to manage DevOps team and DR operations.Implemented multi-step, chained attacks using multiple vulnerabilities for exposing potential exploits using creative and lateral thinking to achieve expanded view of standard threat vectors.Thought outside the box to determine innovative ways of exploiting Web vulnerabilities and remediation strategiesDeveloped and documented a Playbook for analyzing Web application security threats and recommending mitigation strategies using OWASP application security standards and frameworks.Coordinated with application development teams to implement prioritized fixes without causing issues or P1 outages.Acted as a conduit and liaison between business owners, enterprise architects, developers and network/security team.

Chicago, Illinois

Global Subject Matter Expert for the Web Application Firewall (WAF) and Database Activity Monitoring (DAM) tooling in over 20+ countries.Designed and architect Web Application Firewall Gateways that supported InfoSec goals and objectives. Deployed and supported WAF Gateways both as Reverse Proxy and Transparent Bridge in different locations. Defined and addressed concerns for malicious Web traffic and customized reports needed for them.Tuned security policies and signatures to always deliver True Positives/True Negatives alerts by performing advanced application security alerts, profiles and policies tuning.Updated overall architecture designs as necessary, document implementation strategy, and operational guidelines specific to each location. Performed advanced security and audit policy configuration for Database Monitoring tools with Imperva DAM and IBM Guardium Automated critical processes with Ansible Tower as a scheduled job as well as integrating with external logging to Splunk/ZenossServed as a first point of contact in critical Web security attacks in all geographic location where TransUnion brand existsCoordinated with application development teams to implement fixes and additional monitoring from emerging threats.Created python scripts in Ansible to perform environment installations and automate public facing application deployments within Azure and AWS cloudCreated user stories, unit and integration test cases using CA Agile Central Automated static and dynamic code assessments as part of secure application development build processes in Azure and AWS CloudCo-authored internal policies and control standards covering security in the SDLC, application security standards, best practices, and vulnerability management

Greater Chicago Area

Led the Accenture team of Application Security Analysts for analyzing and responding to threat alerts. Performed dynamic scans with IBM AppScan and Veracode DynamicDS and applied a virtual patching methodology by using the reported DAST scan results to quickly protect vulnerable applications.Conducted secure code reviews with Veracode static code analysis to identify and recommend resolution to source code flaws including SQLi, XSS and CSRFPerformed maintenance and engineering of client's cloud and on-prem Web Application Firewall Developed and documented a Playbook for analyzing Web application security threats and recommending mitigation procedures using application security standards and frameworks

Schaumburg, Il

Managed the global application security initiative, responsible for validating and applying security controls for over +2.5k applications globally. SME for the entire Web Application Firewall estate, covering both cloud and physical data centers

Valparaiso, Indiana

Valparaiso, Indiana 46383

Victoria Island, Lagos

Determined operational feasibility by evaluating analysis, problem definition, requirements, solution development, and proposed solutions.Prepared and installed solutions by determining and designing system specifications, standards, and programming.Improved operations by conducting systems analysis; recommending changes in policies and procedures.Obtained and licensed software from vendors; recommending purchases; testing and approving products.Identified security issues and risks, and develop mitigation plansArchitect, designed, implemented, supported, and evaluated security-focused tools and services including project leadership rolesBuilt and interpreted security policies and proceduresCoordinated in security compliance efforts (e.g., PCIDSS, SOX)Technology Consultant for RF Code DCIM solution, SafeNet, Symantec, AirWatch, Imperva, ArcSight and FireEye Malware Protection SystemsDelivered enterprise security projects across the West African territory, achieving a service revenue of over $2M within a calendar year. Performed engagements across financial and governments institutions. Designed a database sandboxing solution to protect 1k servers for a several Nigerian private banks.

Lagos

Utilized software engineering tools such as configuration management systems, build processes and debuggers in the development process.Created and executed designs for small sets of new functionality as part of a new IP project.Developed complex bespoke applications in C# with applicable DevOps methodologies and release processes.

Master Of Science - Ms, Information Technology & Management (Cybersecurity)

Bachelor Of Science - Bs, Mathematics

Activities and Societies: National Association of Mathematics Students (NAMATs)