Jake Jacobs-Smith Email & Phone Number

New York, Ny, Us

After successfully building the Application Security program from the ground up as the first AppSec hire, I was promoted to Manager of the Application Security team. In this leadership role, I oversee the strategic direction of application security initiatives and manage a team of skilled security engineers dedicated to protecting the organization's assets and minimizing business risk.- Team Leadership and Development: Lead, mentor, and grow a team of application security engineers, fostering a culture of continuous learning and professional development.- Program Expansion: Continue to evolve the Application Security program by integrating advanced security methodologies and technologies, ensuring it scales with the company's growth.- Policy Oversight: Oversee the development and implementation of security policies, standards, and procedures to maintain compliance with industry regulations and enhance the organization's security posture.- Internal Tooling: Guide the design and development of sophisticated internal security tools that automate vulnerability detection, code analysis, and security monitoring, improving efficiency across security operations.- Risk Management: Lead comprehensive threat modeling and risk assessment initiatives to proactively identify potential security threats and develop effective mitigation strategies.- Bug Bounty Program Management: Oversee the company's bug bounty program, coordinating with external researchers to identify and remediate vulnerabilities promptly.Key Achievements:- Expanded the Application Security team by recruiting top talent, resulting in a dramatic improvement in vulnerability remediation times.- Implemented strategic security initiatives that reduced critical vulnerabilities, significantly minimizing business risk.- Achieved compliance with major industry standards and successfully passed all external security audits under my leadership.

New York, Ny, Us

- Program Development: Designed and implemented the comprehensive Application Security program, setting the strategic direction and establishing best practices for secure software development.- Policy Creation: Authored and enforced security policies, standards, and guidelines to ensure compliance and enhance the organization's overall security posture.- Internal Tooling: Designed and built advanced internal security tools to automate and streamline vulnerability detection, code analysis, and security monitoring, significantly improving efficiency and accuracy in the security processes.- Vulnerability Management: Led the end-to-end vulnerability management process, including identification, assessment, remediation, and reporting of security vulnerabilities across all applications and systems.- Secure Code Reviews: Conducted in-depth secure code reviews and provided actionable feedback to engineering teams to mitigate security risks early in the development lifecycle.- Threat Modeling and Risk Assessment: Performed comprehensive threat modeling and risk assessments to proactively identify potential security threats and implement effective mitigation strategies.- Bug Bounty Program Management: Established and managed the company's bug bounty program, coordinating with external security researchers to identify and resolve vulnerabilities.- Offensive Security Research: Led offensive security research initiatives to enhance the team's capabilities in identifying and addressing emerging threats, and staying ahead of potential security challenges.Key Achievements:- Successfully built the Application Security program from scratch, resulting in a measurable decrease in security incidents.- Implemented advanced security tooling that reduced vulnerability detection time and increased remediation efficiency.- Developed policies and procedures that passed all internal audits and met industry compliance standards.

I provide dedicated consulting services to organizations looking to enhance their cybersecurity posture and protect critical assets.Key Activities & Achievements:- Secure Code Reviews: Evaluate source code to identify potential vulnerabilities and offer clear remediation recommendations, helping clients meet industry best practices.- Infrastructure Assessments: Conduct thorough reviews of both on-premises and cloud environments, ensuring configurations align with modern security standards.- Proactive Security Controls: Collaborate with stakeholders to design and implement security measures that mitigate risks and support long-term resilience.- Asset Identification & Risk Analysis: Help clients pinpoint critical assets, assess potential threats, and craft prioritized remediation strategies.- Penetration Testing: Perform targeted penetration tests to uncover exploitable weaknesses, followed by detailed reporting and remediation plans.- Risk Management: Establish acceptable risk thresholds and create action plans for addressing risks beyond tolerance levels, driving continuous improvement.- Threat Modeling & Architecture Reviews: Develop and maintain threat models for new and existing applications, ensuring security-by-design principles are followed.- Security Awareness & Training: Deliver training sessions or workshops on secure coding, incident response, and compliance, fostering a security-minded culture.- Security Tooling & Automation: Integrate static and dynamic analysis tools into CI/CD pipelines and automate scanning for dependencies, containers, and infrastructure-as-code.- Compliance & Regulatory Guidance: Provide guidance for meeting frameworks (e.g., PCI DSS, HIPAA, GDPR) and conduct gap analyses against industry standards like NIST CSF and ISO 27001.Strategic Security Roadmapping: Partner with executive stakeholders to develop multi-year security roadmaps and demonstrate security maturity improvements over time.

New York, Us

San Jose, Ca, Us

As the first Application Security hire in the business unit, I was tasked with building the Application Security team from the ground up and establishing processes related to the secure software lifecycle. Operating as a one-person team, I developed and implemented comprehensive security measures to integrate seamlessly into existing workflows that previously lacked security protocols.Security Program Development:- Security Tooling Design: Designed and built security tooling integrated within the CI/CD pipeline, enabling automated security checks and facilitating continuous security assessment- Secure SDLC Design: Designed a Secure Software Development Lifecycle process, injecting security checks into the build pipeline and pre-release stages to proactively identify and mitigate vulnerabilities- SAST and DAST Implementation: Deployed SAST and DAST scans across all development teams, achieving full coverage and significantly enhancing the detection of security issuesVulnerability Management:- Manual Security Reviews: Performed in-depth manual security reviews to complement automated scanning tools, identifying complex vulnerabilities that required nuanced understanding- Secure Code Solutions: Designed and implemented secure code solutions for vulnerabilities uncovered during reviews, directly contributing to more secure and robust applicationsCross-Functional Collaboration:- Served as the Application Security subject matter expert during security incidents, working closely with senior leadership to address and mitigate issues promptlyAchievements:- Enhanced Security Posture: Successfully elevated the business unit's security posture by embedding security into the development lifecycle, leading to more secure and reliable software products- Efficiency Improvements: Achieved a significant reduction in false positives from security scanning tools, improving efficiency and allowing development teams to focus on genuine security threats

San Jose, Ca, Us

As an Information Security Engineer, I was pivotal in establishing and enhancing the organization's security posture. As the second hire on the security team, I contributed to its growth to over 10 members across three pillars: Security Architecture, Compliance, and Incident Response.Security Architecture & Risk Assessments: - Conducted architecture reviews for 16 engineering teams worldwide at various development stages - Coordinated third-party penetration testing and conducted comprehensive threat assessments and modeling - Identified security threats and guided engineering teams in resolving issues effectively - Facilitated the adaptation of processes for DevSecOps, translating security requirements into actionable tasks - Regularly collaborated with software engineering teams to implement security controls and design secure architectures - Performed privacy impact assessments to catalog all data and personally identifiable information (PII)Security Program Management: - Managed and led successful SOC2 and FedRAMP audits - Developed engineering implementation plans for unmet controls and created operationalization strategies - Scheduled and coordinated cross-functional teams for evidence collection and compliance verification - Intellectual Asset Protection Program: - Led cross-functional efforts to consolidate data and remediate identified deficiencies - Conducted Business Impact Analyses as part of the Business Continuity ProgramAchievements & Recognitions: - Overcame the challenges of being new to security by quickly learning on the job with minimal oversight - Played a key role in building the security architecture team from the ground upTools & Frameworks: - Utilized OWASP, CIS, and NIST guidelines and SOC2 compliance frameworks - Embraced DevSecOps practices to integrate security seamlessly into the development lifecycle

Lanham, Maryland, Us

Support an intensive coding bootcamp based out of University of Minnesota Department of Continuing Education involving in-class teaching through an extensive curriculum using JavaScript, Node.js. Express.js, jQuery, AJAX, RESTful APIs, React, MySQL, and MongoDB.

Norfolk, Va, Us

Information Warfare Specialist 2009 - Deployed to Kuwait2012 - Deployed to Afghanistan

Minnetonka, Minnesota, Us

- Product Owner of three digital media platforms - Manage product development roadmap- Release management- Participate in all Agile/Scrum ceremonies- Backlog maintenance and grooming- Socialize product roadmap- Creation of user stories and functional requirements- Lead and coordinate efforts with business teams, software development team, operations, other product managers, and external partners to guarantee a smooth and efficient product delivery- Assisted the Director of Product Strategy in prioritizing items on the roadmap- Understand in detail how new features are being implemented- Analyze market trends to suggest new features on existing products- Conduct competitor analysis to assess product strengths and shortcomings

Minneapolis, Minnesota, Us

Prime Digital Academy is an accelerated learning program teaching foundational software engineering skills through a full-stack JavaScript development curriculum. The program is supplemented by an apprenticeship network with dozens of companies signed up to bringing graduates of the program onboard to continue their learning on-the-job at an impressive list of the area’s best workplaces.Prime is distinguished from other programs through it's tight connection with the industry. Founded by and co-located alongside 500+ employee custom software powerhouse, The Nerdery (http://nerdery.com), Prime students get to learn the industry from the inside. Once students have completed their studies they have the chance to apply to a network of apprenticeships coordinated by Prime with companies ranging from startups to agencies to Fortune 500 companies.

St. Louis Park, Mn, Us

•Responsible for account management and the development and growth of project-based technology consulting services in Fortune 100 organizations with an emphasis on agile driven engagements•Responsible for forging strategic partnerships with Director, VP, and C-level executives in IT, HR, Procurement, and Finance to secure and close business•Work with technical and business stakeholders to understand business drivers•Coordinate between internal and external teams to ensure business and technical requirements are defined and met•Maintaining timely and accurate reference documentation for internal management•Coordinate with managers and executives to understand current and upcoming needs •Create and manage strategies for new business development and continued growth with current clients•Train team members on business development strategies•Contact new potential businesses to explain our services and understand their current and upcoming needs

Duluth, Georgia, Us

• Responsible for forging strategic partnerships with new and existing clients to maximize revenue and provide an excellent customer experience• Work with stakeholders to understand business drivers• Maintaining accurate reference documentation for internal management• Provide comprehensive onsite client services including the management and orientation of all new contract employees• Coordinate with managers and executives to understand current and upcoming needs • Coordinate interviews and new starts with managers to ensure a seamless transition• Create and manage strategies for new business development and continued growth with current clients• Train team members on business development strategies• Contact new potential businesses to explain our services and understand their current and upcoming needs

• Provide comprehensive onsite client services including the management and orientation of all new contract employees to a local Fortune 1000 company• Coordinate with managers and executives to understand current and upcoming needs • Coordinate interviews and new starts with managers to ensure a seamless transition• Create and manage strategies for new business development and continued growth with current clients• Train team members on business development strategies• Contact new potential businesses to explain our services and understand their current and upcoming needs• Responsible for the full-cycle recruitment effort of engineering and technical candidates in the Twin Cities Metro area• Manage employees working at client sites

Master Of Science - Ms, Cybersecurity

Bachelor Of Science - Bs, Computer Science

Full Stack Engineering

Generals - Political Science