John Burke Email & Phone Number

Remote

Application Security, Threat Modeling, Secure SDLC Training, Application Security Assessments, Developing Secure Coding Architecture Best Practices, and building a security culture that sets standards, enables dev teams to meet them, and governs those standards.Key Achievements:* Implemented a business unit wide threat modeling program enabling dev teams to create and update models on their own* Established Secure Developer Yearly Training Program including evaluation of over 20 options, PoC of three leading contenders with key stakeholders, and PoV with development team* Initiated a proactive 3rd Party Library update program to enable dev teams to stay ahead of Component Vulnerabilities* Provide regular guidance to development on code vulnerability remediation, Azure hardening, and Secure SDLC practices (Secure Coding, Testing, Build, Deploy, and Maintenance)

Remote

Roles: Security Architect & Engineer; Cyber Risk, Vuln Mgmt., & Incident Response Analyst; Project Manager • Drove adoption of testing and gating controls in our CI/CD pipelines• Led initiative to convert Legacy source control system to a modern git-based system; adding checks to stop future deployments if violations found with the code (security and reliability)• Upgraded .NET Framework for Legacy monolithic codebase of 27.5M lines for EOL remediation• Proficiently led initiatives in all eight CISSP domains across our various security teams• Overhauled engagements with Dev teams. Grew scope from three teams to encompass all 40+ IT; changed Dev interest from reluctant at best to truly “engaging” with backlogs of tangible work items• Drove remediation of vulnerabilities, including architecting new, secure solutions• Implemented threat modeling across the IT space• Developed company's first App Catalog and conducted security review of all public web applications• Implemented SAST and Code Quality scanner for all Dev Teams; replacing existing broken system

Roles: Architect and Tech LeadLanguages/Technologies: .NET, SSMS, Azure DevOps, Jira, ConfluenceFull-Stack C# Development including web, windows, and batch applications; mentoring and on-boarding new team membersSecurity Focuses:• Scripted a confusing, week long developer endpoint setup; reducing setup to a matter of hours• Refactored company's SAML validation from non-compliant to reusing one of the top three libraries for .NET SAML 2.0 compliance. Remediated and validated multiple high risks via partnering with 3rd party• Assisted QAs and Developers in automating regression and unit testing• Ingested data from 3rd party sources with checks for data consistency and reliability• Drove company-wide usage of Sumo Logic for consolidating log sources along with monitoring and alerting

Roles: Architect, Tech Lead, Scrum Master, Project ManagerLanguages/Technologies: Groovy (Java), SQL, Cobol, REST, Pub-Sub, Jenkins, Bitbucket, XML, QA and UATStarted a remote agile development team; consisting entirely of newly hired software engineers. Architected solutions via a mix of REST, event driven (a first for the company), and batch web services. Provided on-boarding and mentoring of new hires, including founding a project management and leadership training.Security Focuses:• Integrated 3rd Party Workers Comp. system to over one-thousand touchpoints with Legacy System• Implemented company's first DevOps team with first CI/CD system and git-based Source Control• Trialed and rolled out Splunk to entire company for Log Consolation, monitoring, forensics and alerting system of software and security issues• Selected Security Champion; focuses included IAM, SCA, SAST, OWASP, Database Security• Implemented a full suite of tests including: unit, integration, health, liveliness, and regression• Built reusable design patterns to enable swifter and secure future development

Tashkent, Uzbekistan

Roles: non-profit public speaking and fundraising, professional and personal mentoring and coaching, business owner and management, business consulting, market research, language student, head of team securityLanguages: Russian & UzbekCommunity Development (mentoring, training, business development) in Uzbekistan Researched and started several companies across fields including: IT, orchards, and business consulting Mentored individuals in both their personal and professional lives. Non-profit communication and budgets: Built and coordinated ongoing communication, including public speaking, with a network of over 600 entities, with annual fundraising donations for non-profit surpassing $100,000Security Focuses:• Performed risk management for team personnel: Risk Assessment, DR/IR Plans (including earthquakes and civil unrest), and IT security (network and secure communications, as well as endpoints security)• Evaluated potential for new business ventures. Focus included both business viability, including Risk Management, and viability of IT consultants (including PCI-DSS and country specific compliance)• Compliance for companies in a climate that is ranked in the top 10 for difficulty of doing business• Managed a cross-cultural team from over 10 countries; included recruiting, on-boarding, and off-boarding

Livonia, Mi

Roles: Founder, Contract Tech Lead; Contract Project ManagerLanguages/Technologies: Cobol, Java, DB2, SQL, SSMS, Cisco, JiraConsulting, largely a continuation of work for Auto-Owners. Provided full SDLC services from business requirements to software maintenance, included: database management, quality assurance and software testing, and VPN connectivity Security Focuses• Worked as Auto-Owners’ first remote employee: worked closely with network engineers through setup and troubleshooting to ensure confidentiality, integrity, and availability• Converted legacy database (Adabas) to DB2: Encryption at Rest and segregation of sensitive credit-related information; helped/companies first relational database. Included regression testing suite as well as SQL Tuning to ensure reliability, efficiency, and speed• Served as Project Manager, Architect, and Tech Lead for re-constructing credit-score-based and loss-based rating for commercial and personal insurance, including ensuring varying rules• Led project to build web-based Change Control System for 3rd Party purchased software

Roles: Architect, Tech Lead, QA, and Project ManagerLanguages/Technologies: Cobol, FTP, SFTP, PGP, HTML, CSS, Java, JavaScript, Adabas, batch scripting Programmed and maintained Legacy Cobol and Database System for company's flagship auto insuranceSecurity Focuses:• Converted overnight batch processing to real time results rating insurance products; built companies first automated regression testing to ensure 1-1 functionality• Led Project to build and secure company’s first interactive web system. Included: IAM for both public and private systems, input sanitization, securing data, and 3rd Party Software Integration• Solely converted manual mail/FTP state reporting system to fully automated SFTP system• Risk Management Training in Auto and Property Insurance: review and rating (loss and credit-based)• Aided in company’s first credit-score-based rating system for all personal insurance products• Built internal change control and release system to handle requests, reviews, approvals, and historical records for 3rd Party System (Duck Creek)

Lansing, Mi

Yearlong internship teaching fourth grade. Independently planned, taught, and assessed lessons in all subjects, integrating technology and keeping pace with all school goals and state curriculum. Selected Achievements• Responsible for upholding all teaching responsibilities for majority of the spring semester.Earned twelve Masters Level Credits in Curriculum Development

East Lansing, Mi

Instructed the recitation portion for Pre-Calculus course as well as one-on-one tutoring, grading of work, and providing feedback and guidance to students.

Master'S Degree, Divinity/Ministry

Ba, Elementary Education

Activities and Societies: Cutting Edge Ministry