• Expert knowledge in the Payment Card Industry Data Security Standard. Performed internal application security audits. Advised development on mitigation techniques. Main technical point of contact to the external security auditor.• Provides direction and assistance to architects and developers in the design and implementation of secure applications based on industry best practices.• Engages customers directly and indirectly by assisting with application security integration into the customer’s enterprise and by responding to application security questions/concerns.• Ensures that a secure Software Development Life Cycle is properly enforced which includes integrity/chain of custody enforcement from code check-in through deployment. Performs security reviews at the requirements, design, code and testing phases. Maintains a set of development/coding guidelines.• 10 years experience as part of the middleware team as the design/development team lead responsible for production support, development and maintenance of the application security component • Platform technologies include JBOSS, WebLogic, Java, C/C++, Linux, IBM AS400/iSeries, Tuxedo, Corba, Oracle, Cassandra and Delphi• CISSP and CISA certified• Application security expertise includes: