Jonathan Schaaf

Jonathan Schaaf Email and Phone Number

Staff Product Security Analyst ➡️ Principal Product Security Leader @ GE Healthcare
Madison, WI, US
Jonathan Schaaf's Location
Greater Madison Area, United States, United States
Jonathan Schaaf's Contact Details
About Jonathan Schaaf

Versatile and dedicated information security professional with a software engineering background. 15+ years experience and an understanding that software security counts. Experience with a variety of technology stacks and all phases of product lifecycles.

Jonathan Schaaf's Current Company Details
GE Healthcare

Ge Healthcare

View
Staff Product Security Analyst ➡️ Principal Product Security Leader
Madison, WI, US
Website:
gehealthcare.com
Employees:
57831
Jonathan Schaaf Work Experience Details
  • Ge Healthcare
    Staff Product Security Analyst ➡️ Principal Product Security Leader
    Ge Healthcare
    Madison, Wi, Us
    View
  • Ge Healthcare
    Staff Product Security Analyst / Principal Product Security Leader / Penetration Tester
    Ge Healthcare Aug 2015 - Present
    Chicago, Us
    Responsible for guiding product teams on best practices to produce secure products. I conduct security assessments, act as the primary security consultant for GE’s MR and Digital Expert products, and support other product teams on a secondary basis. While consulting with teams, emphasis is placed on identifying security risks, balancing costs and benefits, and determining appropriate controls. • Contributor to hundreds of grey-box product assessment efforts, across a diverse array of medical devices and software products. Responsible for all aspects of assessment, including scoping, issue detection, scoring, and report generation. I have a proven capability to identify significant software security issues, appropriately calculate risk scores using CVSS, and to communicate the issues to product teams.• Experience responsibly disclosing issues discovered via fuzzing to the owning third-party software vendor.• Serve as a primary point of contact for product teams with security questions relating to Linux. • Involved with teams making RMF submissions and implementing the DoD’s Security Technical Implementation Guidance (STIG) on Linux-based products.• Provide training to engineers on security development lifecycle, with an emphasis on Threat Modeling.• Work with both customers and suppliers to identify security requirements and to resolve security issues.• Participated in open source projects relevant to GE's products
    View
  • Ge Healthcare
    Software Engineer / Lead Software Engineer / Staff Software Engineer / Interim Manager
    Ge Healthcare Jan 2012 - Jul 2015
    Chicago, Us
    Responsible for design, implementation, and support of customized Linux-based operating systems used in General Electric's diagnostic imaging products. Worked with software design teams at geographically diverse locations to help refine software architecture and to solve issues encountered by the Magnetic Resonance Imaging (MRI), Nuclear Medicine, Computed Tomography (CT), X-Ray, and Mammography teams. - Engaged in architectural considerations regarding system security. Assisted with analysis of CVEs that impacted GE products. Coordinated with product teams applying the DoD's Security Technical Implementation Guidelines (STIGs) and teams seeking FIPS 140-2 certifications. - Found and eradicated bugs regardless of where they were in the technology stack. Acknowledged by peers and managers for an ability to rapidly find root causes in software components I had never seen before. - Provided temporary leadership of six team members with geographical presence in North America and Asia during a nine month transitory period. Responsible for functional management (performance evaluation, budget, etc) as well as technical leadership.- Participated in open source projects relevant to my employer's products. Submitted various patches to upstream communities. - Used a working knowledge of software licenses and software patents to guide product teams towards appropriate use of open source software. Helped teams find ways to license patented technologies when appropriate.- Maintained Design History File (DHF) documentation, notably including software requirements.- Assisted with administration of a small data center on an as-needed basis. Familiar with various storage technologies (RAID, LVM, etc), network services, and virtualization technologies (KVM, Virtual Box, etc).- Drove processes changes that led to a 4x decrease in time required for software release (annual releases became quarterly)
    View
  • Astronautics Corporation Of America
    Software Engineer
    Astronautics Corporation Of America Jun 2005 - Jan 2012
    Oak Creek, Wisconsin, Us
    Served as a key technical resource for an Electronic Flight Bag (EFB) product line and assisted with design and development of Electronic Flight Indicator (EFI) products. The Astronautics EFB is currently used by at least 14 airlines, is available as an option on all modern Boeing aircraft models, and is standard equipment on the Boeing 787. - Defined and implemented APIs within a Software Developer's Kit that has been used by third parties to create diverse applications ranging from aircraft performance calculators to in-route moving maps.- Heavily involved in the day-to-day tasks of software development. Particularly involved with the resolution of hard-to-fix issues; In one case I successfully troubleshot an issue within two days that had not been resolved even after members of the responsible team had traveled to the US to investigate the problem.- Directly involved in the investigation of real-world system failures (hardware and software). Analyzed usage data from Japan Airlines and formulated recommendations that contributed to order of magnitude reliability increases.- Became a domain expert for system requirements by obtaining a private pilot's certificate.- Worked directly with representatives of Boeing, enabling the certification of two generations of the EFB software suite for use in applications with a “Major” (Level C) failure categorization.- Encouraged the use of subversion as a lower-cost alternative to commercial version control software and became the administrator of a Linux-based subversion server with 50+ users that made at least one checkin.- Assisted with development of embedded software that monitored temperature, loaded boot software to the firmware hub, and sequenced the application of power to an Intel atom based primary flight indicator product.- Contributed to software projects at each DO-178 B hazard classification from level A (Catastrophic) to level E (no effect)
    View

Jonathan Schaaf Skills

Embedded Software Software Development Linux Software Design Subversion C++ Embedded Systems C Software Engineering Do 178b Object Oriented Design Rtos Device Drivers Xml Software Security Gcc Arinc 429 Opengl Tcp/ip Avionics Information Security Doors Microcontrollers Firewalls Computer Security Vulnerability Assessment Penetration Testing Testing Kali Linux Threat Modeling Vulnerability Scanning Nmap Fuzzing Linux Firewalls Whitelisting Antivirus Metasploit Pki Encryption

Jonathan Schaaf Education Details

  • Milwaukee School Of Engineering
    Milwaukee School Of Engineering
    Software Engineering

Frequently Asked Questions about Jonathan Schaaf

What company does Jonathan Schaaf work for?

Jonathan Schaaf works for Ge Healthcare

What is Jonathan Schaaf's role at the current company?

Jonathan Schaaf's current role is Staff Product Security Analyst ➡️ Principal Product Security Leader.

What is Jonathan Schaaf's email address?

Jonathan Schaaf's email address is j.****@****ics.com

What is Jonathan Schaaf's direct phone number?

Jonathan Schaaf's direct phone number is +126222*****

What schools did Jonathan Schaaf attend?

Jonathan Schaaf attended Milwaukee School Of Engineering.

What are some of Jonathan Schaaf's interests?

Jonathan Schaaf has interest in Education.

What skills is Jonathan Schaaf known for?

Jonathan Schaaf has skills like Embedded Software, Software Development, Linux, Software Design, Subversion, C++, Embedded Systems, C, Software Engineering, Do 178b, Object Oriented Design, Rtos.

Who are Jonathan Schaaf's colleagues?

Jonathan Schaaf's colleagues are Don Gorg, Sergio Arias, Angela Amendola, Abhijit Roy, Mariusz Lembke, Johnny Williams Iv, Gregory A (Med) Lloid.

Free Chrome Extension

Find emails, phones & company data instantly

Find verified emails from LinkedIn profiles
Get direct phone numbers & mobile contacts
Access company data & employee information
Works directly on LinkedIn - no copy/paste needed
Get Chrome Extension - Free

Aero Online

Your AI prospecting assistant

Download 750 million emails and 100 million phone numbers

Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.