Eric Fay Email & Phone Number

New York City Metropolitan Area

Senior Manager Security Engineering - Head of Product Security for Corporate Services Security at Amazon

Substack lets independent writers and podcasters publish directly to their audience and get paid through subscriptions.

New York, New York, United States

As the Director of Information Security, Eric created Carta’s Product Security program from scratch with a pragmatic focus on security automation throughout the software development lifecycle. He led hiring for the team and scaled the team from himself to 5+ senior product security engineers dispersed across the United States. Eric’s responsibility also included the creation of the Product Security and Cloud Security functions for Carta’s Brokerage Services and Markets business unit (CCMX), covering their alternative trading system (ATS).

New York, New York

During his tenure at Paypal Eric was responsible for the Information Security programs of the business units Braintree and Swift. Eric was responsible for the protection of 6+ Billion e-commerce transactions annually across all of the online payment solutions and the global payment processor at Braintree. He was also responsible for the working capital of 20k+ small businesses at Swift. He led multiple security teams including security engineering, compliance and security operations.He led an uplift across multiple information security domains spanning all Paypal business units. This initiative increased coverage, capability and maturity across Vulnerability Management, Asset Management, Cloud Security Posture Management and Identity Management. Eric also created an Application Security framework to evaluate Application Security maturity and capabilities across all Paypal Business units.

Santa Monica, California, United States

Eric was the first application security hire at Hulu in 2014 and was responsible for the creation of the application security program. He laid the foundation for the application security program through the creation of monitoring tools, onboarding of external security software, evangelization of application security and secure coding best practices. He led hiring for the team and scaled up the Application Security team from 1 to 10+ Application Security Engineers, Software Engineers and Security Analysts.As the Head of Application Security, Eric set the application security strategy across the organizationprotecting Personal Identifiable Information for over 26M subscribers. He expanded the team’s responsibility to include Product Security, shipping features to subscribers such as new device login email notifications and features that helped secure subscribers’ accounts from account takeovers and other malicious actions.Application Security Engineer -> Senior Application Security Engineer -> Manager of Security Engineering -> Senior Manager of Security Engineering

Princeton, Nj

Lead vulnerability management consultant. Supported and operated the enterprise vulnerability management tools which covered: static code analysis, dynamic code analysis and infrastructure vulnerability management.Tasked with heading up the vulnerability management program at Dow Jones & Company in conjunction with leading vulnerability assessments. These assessments covered both new and legacy applications along with their underlying infrastructure.Also lead initiatives covering the creation of a new application security review process, automating WordPress vulnerability detection and the PCI vulnerability management process.

Assisted professors with independent research projects through Java programming. Delivered on a live whiteboard collaboration workplace tool that led to a US patent submission.

M.S., Computer Science

Relevant Coursework: Database System Implementation, Internet Crawler, Fundamental Computer Security & Cryptography, Intelligent Systems

B.S., Computer Science, Information Technology

Activities and Societies: Division 1 Track and Field