Led a multi-year program implementing Role-Based Access Control in Salesforce's largest administrative tool, cutting access provisioning time by 40% and automating 1,400 hours/year.Drove strategic quarterly access reviews, utilized SQL and Python for data analysis, and collaborated with executive stakeholders to ensure compliance and trust.Developed Python tools to manage access control, including freezing accounts and automating data cleanup, yielding substantial time savings.

Restructured Salesforce AppExchange’s Trust Promise Framework in accordance with stakeholders’ input to make Security Assessment reviews faster and improve both time and budgetary efficiency per application submitted for review.Updated the technology and processes used to calculate Salesforce Bug Bounty Program’s product landscape coverage statistics to improve data integrity and accuracy of executive reporting. Designed schematic for the construction of a reliable new single source of truth for attack surface inventorying, cataloging over 100% more than the previously known attack surface. Enabling the BlackBox Security Testing Programs to discover and address coverage gaps to make informed security investments across products. Created and drove a project to improve the average quality of reports submitted to Salesforce’s Bug Bounty Program by security researchers. This project has led to faster bug-triage times and quicker researcher time-to-pay, increasing budget efficacy for triage workers and improving researcher experience.

Utilized McKinsey method of problem-solving to identify a Client’s underutilization of their POS system; presented my recommendation to key stakeholders and gained client buy-in.This led to a readjustment of business processes within the business, preventing needless investments from being made as well as empowering customer-serving employees.

Drove risk discovery efforts to catalog thousands of available computers and their open ports across client’s corporate network using NMAP and assisted in a grey-box penetration test using Nessus.Reviewed corporate policies and compared them against federally mandated standards to ascertain compliance.Created security threat models of client applications through Microsoft’s Threat Modeling Tool 2016 to aid a Security Assessment.