Jonathan Poon Email & Phone Number

Redmond, Wa, Us

San Jose, Ca, Us

I lead the Threat & Vulnerability Management team of security engineers, data analysts, remediation managers to drive a very high level of vulnerability management posture, implementing brand new capabilities to expand our coverage, and increase protection against Zoom's devices, data, and applications against an ever-evolving security and threat landscape.Establish cybersecurity capabilities and processes to protect company assets.Expanding, motivating and coaching the Threat & Vulnerability Management security engineers to accelerate their impact, exposure and career growth.Staffing, leading and implementing new security initiatives such as the software release security assurance capability.Accelerating the maturity of TVM-related workflows and reporting. Implement automated workflows for remediation or execution of implementing security controls.Deliver strategic thought-leadership for multiple information security disciplines such as, vulnerability management, software supply chain security, container security, application controls and best practices.Enhancing container security scanning and coverage, with huge reductions in the open vulnerabilities and images in registries, and launching new areas of coverage like web app scanning, EOL software etc. Create and maintain the set of unified key performance and risk indicators aligned to stakeholder requirements.Work in a consultative fashion with business unit leadership to share the vision and operational requirements to improve the security posture.Promote and develop vulnerability assurance initiatives work to improve existing security services, including the continuous enhancement of existing methodology material and supporting assets.Define standardized processes, tools, and platforms for the timely and quality delivery of cybersecurity solutions in cooperation with other IT, engineering and business units.Provide leadership in a fashion that supports Zoom's culture, mission and values.

Redmond, Washington, Us

Managed a team of anti-malware and vulnerability management service engineers and program managers to drive the next level of transformation on the site reliability engineering journey. Built up a huge expansion of engineers with an eye on keeping the team collaboration at a very high level.Streamlined the incident management channels and support scenarios. Implemented a drive to pivot on monitoring and alerting coverage and automated incident ticket creation and resolution accuracy. On-boarded new tools to expand the service capabilities of the team to support the security focus of the company across platforms and boundaries. Worked hand in hand with the the program management and service management teams to ensure hand-offs are done with improved assurances and support-ability. Created predictable coverage of support resources from both aspects of the team to improved on customer support expectations and work life balance challenges..Drove the transformation and modernizing of legacy processes into cloud-enabled, highly optimized and efficient implementation while improving the KPIs around processing speed, uptime, available etc. at a significantly lower cost of operations. Enabled proof-of-concept work to accelerate transformative capabilities ahead of traditional vulnerability management approaches, and resulted in multiple new expansive capabilities to accelerate our roadmap.Drove the sprint and engineering cadence with the engineering program managers and improved the planning, forecasting and feature releases while reducing information loop from users to engineers and increasing the quality and value proposition of our deliveries.

Redmond, Washington, Us

Managed the Redmond anti-malware service engineering team of service engineers, malware analysts, with dotted line management of the regional teams in Dublin and Puerto Rico to provide regional 16x5 coverage in a consistent and reliable mannerA primary goal of this role change was to utilize my experience from a service management and program management perspective to build up the muscle in service engineering to drive increased focus on automation to reduce incidents and ticket counts.Led the service team and drove through the mitigation and validation activities for WannaCry, Petya/NotPetya, and held a steady level of service availablity through the Hurricane Maria impact in our Puerto Rico data centers with hard and fast decisions around scoping of work, resources scheduling and optimizing coverage and volume management.Reset and established a service engineering and site reliablity engineering focused on the new Microservices based hybrid cloud platform for highly secure anti-malware scanning services. The new cloud architecture spans the public cloud assets and highly secure on-premises assets to provide flexibility, cost efficiency, agility and enhanced security controls.Built regional presences of the platform to ensure high degree of concurrency, business continuance and disaster recovery, while we moved systems from on-premise implementations to the public cloudDrove the global anti-malware SE/SRE organization to a modern data and analtyics driven “DevOps” model with 99.9% reliability and service level objectives (SLO) with heighted focus on automation and self-healing mechanisms, alerts fidelity, improved change controls, patch automation and incident management as key pillars for change.

Redmond, Washington, Us

As the head of the Anti-Malware team, I led a high impact team of engineers, architects and program managers to lead the risk mitigation of releasing malware across all Microsoft products, services and 3rd party applications on Microsoft marketplaces and properties.Through personalized coaching, I motivated and inspired my directs, partners, and peers to accomplish what they are capable of doing not just for my organization, but for their individual career and life goals as well.With a blend of technical acumen, technical evangelism, and business development, I led my team to research and prioritize the implementation of multiple new capabilities to expand the end to end antimalware posture of Microsoft products, apps, and binaries, while balancing the continued quality improvement of day-to-day operations in this secured space.Demonstrated ability to collaborate with multiple partners, across multiple regional teams, industry partners and across organizational boundaries, to develop and drive a coherent strategy and program.Supported the drive to share a rich set of metadata of Microsoft releases with the security industry and strengthened the collaboration to improve the overall ecosystem through this data sharing effort.The transformational efforts on the the next generation infrastructure, a challenge that requires timely execution with the highest degrees of security, performance, availability, and reliability, to better address the conflicting needs of increased velocity of product releases vs. security and compliance needs for Microsoft and its ecosystem.

Redmond, Washington, Us

Managed the scanning service as a service manager. Worked with multiple regional teams of PMs, analysts, and engineering teams to maintain a high level of service coverage and availability.Owned the compliance of the company antimalware scanning policy, established new rules, procedures and policies within the Release AM team and its immediate partner groups. Led the service and project teams to deliver against reliability, latency and throughput targets.Worked with lead Engineers to derive 18-month, 3-year and 5-year roadmap for capabilities and architecture revisit. Expanded coverage of our service from traditional products into the apps world, the specific platform needs of the major desktop and mobile operating systems, and the online and cloud aspects.Built up a 16x7 team across three regions, with increased expertise on automation, malware analysis, threat research and machine learning capabilities.Business process owner on business continuance and disaster recovery practice, planning and audit. Drove negotiations with business partners to find alternatives and solutions to business challenges.Balanced the customer's requirements with technical constraints (e.g., application size, network bandwidth, hardware/software/equipment selections) to ensure that the value of the project is realized. Led, articulate and document existing "as-is" systems & business architecture and define strategy for "to-be" architecture for business teams and engineering organizations.

Redmond, Washington, Us

Represented the Release AM Scan team in engaging our IT technology engineering and solutions delivery teams to ensure the right capabilities are delivered timely and effectively.Worked with Release AM Scan engineers and analysts to gather business requirements, derived prioritization of requirements, managed timelines and expectations, coordinated UATs etc. Went through various development methodologies from the SDLC, Agile, Kanban models with different teams.

Redmond, Washington, Us

Managed the Pre-Release Scanning service as an interim service manager for the team. Owned the scanning policy, driving project deliverables and establishing new rules, procedures and policies within the Release AM team and its immediate partner groups.Developed failure mode effect analysis study and derived priorities around mitigation strategies. Interim role ended near end of April 2010

Redmond, Washington, Us

Led the pre-release scanning system as the senior service engineer for the company across multiple regions to ensure all binaries are scanned before RTM.Focused on decompression support for large variety of known and emerging file formats. Derived ingestion and output strategies. Primary role to maintain and increase the level of antimalware scanning coverage through industry outreach, research, coverage and compatibility testing, deployment and service uptime management.

Development of automation for localization of documentations in the Asia-Pacific region.

Business Studies, Business Computing

Gce O Levels, High School