As a member of VF’s Application Security team I am responsible for administering various tools to proactively reduce risk on VF’s public facing internet applications. This includes, currently, configuring Dynamic Application Security Testing scans, validating findings and remediating vulnerabilities with stakeholders. I have also maintained VF’s attack surface management tooling to discover and remediate risk posed by previously unknown public facing assets. I leverage security tools such as Burp Suite Pro and a litany of open source tools to assist in both the validation and discovery of vulnerabilities.

Here I continued on what I did on as my time as an intern, including other tasks such as automating portions of our metrics collection process in Python, and assisting in the implementation of a new Phish report button for users to receive real-time feedback on Phishing campaigns.

On VF’s Security Education Training and Awareness team, I was responsible for crafting simulated phishing emails and training that were sent to a global, company-wide audience. The results of these were analyzed, looking for trends across campaigns, by region, and social engineering type to determine the best way to train and improve VF Corp’s resilience against Phishing attacks.

As a lab assistant at WCU I was responsible for being an aid to instructors in the teaching of students in Python and HTML/CSS. Responsibilities also included being a resource to students outside of class for help in project and course work.

As an intern on VF Corp’s Threat and Vulnerability management team, I was exposed to a number of different aspects of Cybersecurity including vulnerability management and administering VF’s security tooling stack. Vulnerability Management: Configured and scheduled network vulnerability scans, as well as communicated those results out to relevant stakeholders to ensure prompt remediation of issues.Security Tooling: Gained exposure in administering email gateway, configuring rules, and troubleshooting tickets to ensure secure delivery of email. Monitored alerting on endpoint antivirus tooling. Administered SSL certificates to the enterprise.