John Burke Email & Phone Number

Remote

Application Security, Threat Modeling, Secure SDLC Training, Application Security Assessments, Developing Secure Coding Architecture Best Practices, and building a security culture that sets standards, enables dev teams to meet them, and governs those standards.Key Achievements:* Implemented a business unit wide threat modeling program enabling dev teams.

Remote

• Roles: Security Architect & Engineer; Cyber Risk, Vuln Mgmt., & Incident Response Analyst; Project Manager
• Drove adoption of testing and gating controls in our CI/CD pipelines
• Led initiative to convert Legacy source control system to a modern git-based system; adding checks to stop future deployments if violations found with the code (security and reliability)
• Upgraded.NET Framework for Legacy monolithic codebase of 27.5M lines for EOL remediation
• Proficiently led initiatives in all eight CISSP domains across our various security teams
• Overhauled engagements with Dev teams. Grew scope from three teams to encompass all 40+ IT; changed Dev interest from reluctant at best to truly “engaging” with backlogs of tangible work items

• Roles: Architect and Tech LeadLanguages/Technologies:.NET, SSMS, Azure DevOps, Jira, ConfluenceFull-Stack C# Development including web, windows, and batch applications; mentoring and on-boarding new team.
• Scripted a confusing, week long developer endpoint setup; reducing setup to a matter of hours
• Refactored company's SAML validation from non-compliant to reusing one of the top three libraries for.NET SAML 2.0 compliance. Remediated and validated multiple high risks via partnering with 3rd party
• Assisted QAs and Developers in automating regression and unit testing
• Ingested data from 3rd party sources with checks for data consistency and reliability
• Drove company-wide usage of Sumo Logic for consolidating log sources along with monitoring and alerting

• Roles: Architect, Tech Lead, Scrum Master, Project ManagerLanguages/Technologies: Groovy (Java), SQL, Cobol, REST, Pub-Sub, Jenkins, Bitbucket, XML, QA and UATStarted a remote agile development team; consisting.
• Integrated 3rd Party Workers Comp. system to over one-thousand touchpoints with Legacy System
• Implemented company's first DevOps team with first CI/CD system and git-based Source Control
• Trialed and rolled out Splunk to entire company for Log Consolation, monitoring, forensics and alerting system of software and security issues
• Selected Security Champion; focuses included IAM, SCA, SAST, OWASP, Database Security
• Implemented a full suite of tests including: unit, integration, health, liveliness, and regression

Tashkent, Uzbekistan

• Roles: non-profit public speaking and fundraising, professional and personal mentoring and coaching, business owner and management, business consulting, market research, language student, head of team.
• Performed risk management for team personnel: Risk Assessment, DR/IR Plans (including earthquakes and civil unrest), and IT security (network and secure communications, as well as endpoints security)
• Evaluated potential for new business ventures. Focus included both business viability, including Risk Management, and viability of IT consultants (including PCI-DSS and country specific compliance)
• Compliance for companies in a climate that is ranked in the top 10 for difficulty of doing business
• Managed a cross-cultural team from over 10 countries; included recruiting, on-boarding, and off-boarding

Livonia, MI

• Roles: Founder, Contract Tech Lead; Contract Project ManagerLanguages/Technologies: Cobol, Java, DB2, SQL, SSMS, Cisco, JiraConsulting, largely a continuation of work for Auto-Owners. Provided full SDLC services from.
• Worked as Auto-Owners’ first remote employee: worked closely with network engineers through setup and troubleshooting to ensure confidentiality, integrity, and availability
• Converted legacy database (Adabas) to DB2: Encryption at Rest and segregation of sensitive credit-related information; helped/companies first relational database. Included regression testing suite as well as SQL Tuning.
• Served as Project Manager, Architect, and Tech Lead for re-constructing credit-score-based and loss-based rating for commercial and personal insurance, including ensuring varying rules
• Led project to build web-based Change Control System for 3rd Party purchased software

• Roles: Architect, Tech Lead, QA, and Project ManagerLanguages/Technologies: Cobol, FTP, SFTP, PGP, HTML, CSS, Java, JavaScript, Adabas, batch scripting Programmed and maintained Legacy Cobol and Database System for.
• Converted overnight batch processing to real time results rating insurance products; built companies first automated regression testing to ensure 1-1 functionality
• Led Project to build and secure company’s first interactive web system. Included: IAM for both public and private systems, input sanitization, securing data, and 3rd Party Software Integration
• Solely converted manual mail/FTP state reporting system to fully automated SFTP system
• Risk Management Training in Auto and Property Insurance: review and rating (loss and credit-based)
• Aided in company’s first credit-score-based rating system for all personal insurance products

Lansing, MI

• Yearlong internship teaching fourth grade. Independently planned, taught, and assessed lessons in all subjects, integrating technology and keeping pace with all school goals and state curriculum. Selected Achievements
• Responsible for upholding all teaching responsibilities for majority of the spring semester.Earned twelve Masters Level Credits in Curriculum Development

East Lansing, MI

Instructed the recitation portion for Pre-Calculus course as well as one-on-one tutoring, grading of work, and providing feedback and guidance to students.

Master'S Degree, Divinity/Ministry

Ba, Elementary Education

Activities and Societies: Cutting Edge Ministry