Eric French Email & Phone Number

Bellevue, Wa, Us

• Built Bug Bounty Program that leverages findings to proactively improve security posture of upcoming releases.• Implemented SAST, SCA, Container, and IaC scans that integrate directly into Source Code Repo's MR/PR quality gates; result is frictionless approach to security scans that does not disrupt developer's CI/CD pipelines.

Cincinnati, Ohio, Us

• Established roadmap for DevSecOps, Application and Cloud Security by applying strong knowledge of industry trends and sound analysis of company's current/future environment• Partnered with other principal engineers on fully functioning API Reference Architecture that enabled engineering teams to quickly build security controls into serverless designs from the ground up. These included AuthN/Z, Encryption, Logging, and Security Events/Alerts; in addition to all CI/CD code quality best practices and security scans• Built cloud native CI/CD pipeline for containerized deployments to Azure Kubernetes Service that included integrations for Docker, Helm, and Terraform scans using the latest in cloud security industry technology

Cincinnati, Ohio, Us

• Designed DevSecOps security framework providing autonomous application security control validation in CI pipelines• Responsible for multiple POC / POV evaluations, and ultimately implementation, of Interactive Application Security Testing (IAST), Dynamic (DAST), Static (SAST), Container Scanning and Open Source Composition Analysis (SCA) • Experience reading lots of code, using SAST and SCA to find vulnerabilities, then providing comprehensive recommendations for remediation through re-usable design patterns and code snippets• Led efforts to engineer cloud security guardrails for migration of legacy applications re-written as cloud native applications deployed in containers and serverless architecture

Cincinnati, Ohio, Us

• Built and managed application security policies while gaining buy-in by linking to broader business goals • Developed initiatives aimed at driving software defects down through education and awareness, consistent assessment practices, reusable security components, integrated security testing, metrics, and governance• Trusted by leadership to provide timely, accurate, and robust responses to regulatory bodies including PCI, Federal Reserve, FINRA, SOX and internal audit

Cincinnati, Ohio, Us

• Led QA organization with $15MM+ annual budget and 20 employees augmented by 250+ contractors providing functional, performance and security testing across web, mainframe, mobile and ATM• Enabled transparent year over year improvements in quality during all phases of project management life cycle enabling sustained UAT leakage below 5% and production leakage below 2% over past 18 months using HP ALM• Responsible for multiple RFI and RFP evaluations of test automation, service and data virtualization tools to increase tester productivity and create ‘Shift Left’ testing approach enabling successful Agile / DevOps transition• Evangelist and leader for Agile transformation of our Quality Assurance workforce, process, and tools both internally through COEs and externally through peer conferences• Hired, taught, coached, and mentored team members resulting in low turnover and highly engaged workforce that routinely scored better than four on 5-point employee engagement scale

Cincinnati, Ohio, Us

• Responsible for six member team of process owners collaborating with 20+ process coordinators in governance of core ITIL processes across Bank’s 800+ applications with 40K incidents and 15K change requests annually• Identification and ongoing monitoring of KPIs driving CIO level awareness of Incident, Change and Problem Management trends impacting service availability and customer satisfaction• Recognized by multiple IT business units for partnering in incident handling and change quality improvements resulting in 52% urgent incident reduction and 23% incident restoration time improvement• Architected and implemented Change, Incident, Release, and Problem Management processes in line with ITIL service level 3 by leveraging collective resources of bank’s IT organization

Cincinnati, Ohio, Us

• Successfully led eight member team responsible for 30+ applications and services; including 24x7 on-call support and DDoS response team for Commercial Internet Banking Portal production and disaster recovery environments• Managed network, server, database, web and API/service layer system architecture diagrams using Microsoft Visio• Designed automated build and deployment processes for Commercial Portal using IBM Build Forge solutions• Managed application security vulnerabilities, including budgeting and remediation of policy exceptions or findings to satisfaction of both internal Bank auditors and external assessors for PCI, SAS70, and SSAE16 compliance

Cincinnati, Ohio, Us

• Managed $2MM Commercial offshore development center consisting of 10 onsite and 40+ offshore consultants• Evangelist and leader for bank’s offshore programs; including ‘Managing Offshore Teams’ training class presenter• Established ODC user group recognized by Sourcing division as best practice for all offshore programs • Partnered with Risk division to identify and mitigate vulnerabilities associated with offshore providers; included robust upfront risk analysis, working with vendor to operationalize, and ongoing monitoring• Traveled to India in Spring 2007 to enable the continued growth and development of bank’s offshore programs

Cincinnati, Ohio, Us

• Development leader for Commercial Internet Banking website through many system upgrades/enhancements• Led peer group in defining Java and C++ coding standards used throughout our technology stack• Key player in definition and implementation of IT divisions’ early offshore development centers

Forest Park, Ohio, Us

• Provided network/system administration across two regional facilities with numerous servers, routers, and PCs• Software development for a single user application that calculates pay rates for prevailing wage union construction jobs.

• Designed/implemented VBA-driven client/server MS Access database serving 30 users across five facilities• Solution included order entry, inventory, purchase order, and reporting capabilities for over 25K orders annually• Provided network/system administration across five regional facilities with numerous servers, routers, and PCs

Cincinnati, Oh, Us

• Designed/implemented VBA-driven MS Excel solution for order entry, inventory and reporting with 100+ user base

Cincinnati, Oh, Us

• Designed/developed automation solution resulting in 26K hours annual efficiency for Operations division • Accomplished Assembler developer for batch and online ACH settlement platform supporting debit/credit cards• Vast mainframe experience including TSO, DFSORT and COBOL, along with manipulation of JCL to run ad-hoc jobs

• Designed/implemented VBA-driven client/server MS Access database serving 15 users across three facilities• Solution included order entry, inventory, purchase order, and reporting capabilities for over 40K orders annually• Provided network/system administration across three regional facilities with numerous servers, routers, and PCs