Franklin Mosley Email & Phone Number

San Francisco, Ca, Us

San Francisco, Ca, Us

Lead the Security organization, which includes teams focused on Product Security, Infrastructure Security, and Compliance. I lead development of strategic plans for the Security org. based on the overall business strategies and goals. I manage working relationships to ensure alignment across departments, which include Engineering, IT Security, Legal, Sales Operations and Procurement. In addition, I manage vendor and external relationships for the organization.• PagerDuty Achievers Club Award Winner for FY22

San Francisco, Ca, Us

Led the creation and build out of the Product Security team at PagerDuty. This included building out the team as well as defining the functional ownership of the team to include managing external penetration tests, conducting security design reviews, secrets management, security in the Software Development Lifecycle (SDLC), and email security. As leader of the team, my role entailed participating in, and guiding the technical design of team-owned systems, leading cost-benefit analysis efforts for proposed technical initiatives, operating the hiring process and making hiring decisions, and measuring and reporting on team performance.• Created a hiring loop for the Product Security Engineer role.• Led the team in an evaluation, acquisition, and implementation of a tool to enable DMARC enforcement on pagerduty.com with a 99%+ pass rate.•100% of customer facing endpoints no longer offer TLS 1.0 or 1.1.•Implemented a Software Assurance Maturity Model. Used it to create a baseline of the current environment and to plan future projects.

San Francisco, Ca, Us

PagerDuty is the leading digital operations management platform for businesses. Our SaaS-based solution empowers over 10,000 small, mid-size and enterprise global customers with the insight to intelligently respond to critical disruptions for exceptional customer experience.My role involved:• Defining and build out the Security Vision and Roadmap for PagerDuty.• Helping all of our engineering teams figure out how to write secure code and how we can best protect our customers.• Building out application security frameworks that hook into our continuous integration systems.• Working with other engineers across the company to figure out where our biggest areas for risk are and help decide what needs to be worked on.• Internal white hat testing.• Collecting and setting up monitoring on security metrics.

As a public speaker, it provides me the opportunity to share my thoughts, vision and best practices in the world of Cybersecurity.• Keynote speaker at DevOpsDays Bogota (https://devopsdays.org/events/2019-bogota/speakers/franklin-mosley/)• Speaker at All Day DevOps 2019 (https://www.alldaydevops.com/addo-speakers/franklin-mosley)• Speaker at PagerDuty Summit 2018• Speaker at Sonatype's DevSecOps Leadership Forum (https://www.sonatype.com/devsecops-leadership-forum-dallas)• Speaker at DevOpsDays Boston 2017 presenting "How to Make a Unicorn: Finding Cybersecurity Talent in the Real World".• Speaker at DevOpsDays DFW 2017 presenting "How to Make a Unicorn: Finding Cybersecurity Talent in the Real World".• Speaker at InteropITX 2017, The Independent Conference for Tech Leaders. Presented a talk titled "The Security Pro's Guide to DevSecOps: How to Get Developers to Write Secure Code".• Speaker at InteropITX 2017, The Independent Conference for Tech Leaders. Presented a talk titled "DevSecOps: Minimizing Risk, Improving Security".• A featured speaker at DevOpsDays DFW 2016 on the topic of integrating security into DevOps. Presented a talk titled “RoboCop: Bringing Law and Order to CI/CD”.

Ann Arbor, Michigan, Us

Lead instructor for the Cybersecurity Professional Bootcamp. Instructing students in the following courses:•Python for Security: Introducing students to the Python programming language, and how cybersecurity professionals use Python every day to write code for scripting and the automation of security-related tools.• Linux Security: Teaching how to manage and operate a Linux environment, with a specific emphasis on Cybersecurity. Course includes labs that are highly technical, coverboth defensive and offensive security, and learn about the security and hardeningaspects of Linux environments.•Ethical Hacking: Teaching how to execute and defend against a variety of cyberattacks, including social engineering attacks, network attacks, applicative attacks, and cryptographic attacks. Includes hands-on labs.•Cloud Security: Instructing about the growing use of cloud platforms, how the cloud environment is managed and secured, and teaching the objectives of the Amazon Web Services (AWS) Certified Cloud Practitioner certification.

Plano, Tx, Us

I was a two time speaker at DevOpsDays Dallas before I crossed over to the role of organizer. In my duties as an organizer I have lead the call for papers, lead the speaker selection committee, have been a speaker liaison, as well as a moderator and emcee.

Reston, Va, Us

At Ellucian, I am challenged every day to assess the state of application security and implement improvements as a key contributor to, and leader of application security initiatives in, Ellucian R&D.My role involves:• Analyzing the security of Ellucian applications and coding practices using a variety of tools and frameworks.• Performing manual and automated application penetration tests.• Acting as an evangelist for application security within Ellucian.• Creating and delivering application security training for product owners, business analysts, test engineers and developers.• Leading ongoing process and policy improvement efforts.• Conducting ongoing research of commercial and open source tools and utilities to ensure application security methods remain current and effective.• Formally and informally interacting with clients and stakeholders to address concerns and requests with regard to application security policies, mechanisms and safeguards.• Authoring Alerts, Advisories And Announcements Pertaining To The Latest Industry Security Breaches & Threats

Dallas, Tx, Us

In my time at AT&T, I have been an Information Security professional within our Chief Security Office (CSO) that is tasked with establishing policy and requirements, as well as comprehensive programs, to ensure security is incorporated into every facet of AT&T's computing and networking environments.My roles in this position have been focused in the InfoSec areas of authentication services, biometrics, threat intelligence, mobile and cloud security for enterprise-wide information security programs, and managed services.• I directed a project to develop the business case and requirements for obtaining corporate funding in excess of $2.5 million for a new enterprise-wide authentication system, utilizing two-factor authentication, resulting in operational cost-savings. Led the design and prototype testing phases and implemented the system, which included migrating over 100,000+ users and a large number of client applications and servers.• I performed application security assessments, via white-box testing and manual code review, searching for common vulnerabilities based on OWASP Top 10 and CWE/SANS Top 25.• I was primary architect and developer of an application to provide key executives and security personnel with daily reports of security related intelligence.• As a member of the Biometrics team, I designed and developed a telephone-based IVR system to provide users the ability to reset passwords and one-time password tokens, and verify user identity using speech recognition and voice biometric technologies. This led to a cost savings by reducing the number of calls handled by the call center, shorter hold times and a 90% customer satisfaction rating.• I produced a turnkey solution to provide multi-factor authentication within our cloud services. Helped establish requirements for the project, and designed software to provide multiple authentication factors that can be deployed based on customer needs.

Dallas, Tx, Us

I was promoted to manage the Authentication Services team, within our Chief Security Office (CSO), prioritizing efforts to ensure available resources were focused in high payback areas, tracked project status and communicated updates to all levels of management, and interfaced with clients.• During this period, we implemented robust solutions for four authentication systems that each realized growth of 22%, 32%, 48%, and 335%, while maintaining near 100% availability.• I managed a project to move the critical authentication systems to new hardware environments, while migrating all client traffic to this new environment, with a 0% reduction or loss in service.

Arlington, Va, Us

I worked in the Training Systems Software department where I developed and tested aircraft simulation components used in several military training systems (flight simulators). My work was focused in the areas of visual displays, data transfer modules, and Instructor Operator Stations (IOS) that are used to control the training environment, and supervise the trainee's progress.• Promoted to manage a team responsible for the establishment of a helicopter Instructor Operator Station (IOS) software interface. Supervised development and enhancement of software components, approved version releases for application testing, and provided final approval of product releases.• Received Boeing Certificate for Outstanding Achievement by reducing the customer’s software discrepancy list to zero by the deadline, which resulted in a cost-savings for the company.• Coordinated the technical writing team to develop the user manual. Authored several sections of the manual.• Worked closely with the customer to develop acceptance-testing procedures for the software, answer questions, and demonstrate the product.

Bachelor Of Science (B.S.), Computer Science

Master Of Science (M.S.), Computer Science

High School Diploma