BUSA (BISO) - Business Unit Security Architect for Supply Chain

* Develop processes and standard methodologies for the organization* Provide architecture and standard methodologies; mentorship in building secure Honeywellproducts* Support product security process activities including threat modeling, security requirements,security reviews, threat vulnerability assessments for all software and firmware development inHCE* Lead efforts with the development teams to quantify residual product risk and identification ofappropriate security controls* Provide product security related mentorship and security expertise for all software and clouddevelopment teams in HCE* Drive a standardized set of security product requirements into product and service offerings* Lead and coordinate multi-functional activities for incident response

* Member of team responsible for research and development of emerging technology and security controls for fit within the bank's environment.* Speaker at 2019 and 2018 RSA Conference where I helped facilitate a session on the Cyber Defense Matrix.* Multiple patents filed for security innovation.* Created application to pull in MITRE ATT&CK TTPs based on new STIX/TAXII API.* Threat modeling using STRIDE to assess risk and mitigations needed for solutions deployed in the environment.* Provide guidance on securing an agile SDLC and DevOps by injecting appropriate controls into pipelines (DevSecOps).* Research zero trust environments and how solutions such as BeyondCorp could be implemented within the environment.* Create whitepaper briefings on the outcome of evaluations for products and present to stakeholders.* Build out VMs, Docker Containers, and Azure environments to perform experiments for potential solutions within the bank environment.* Assess startup vendors within the security space for solutions that will deliver impact/benefit to the bank. * Led a secure coding tournament within the bank's developer community.* Conducted evaluations and POCs with security controls such as Intrusion Deception, Cyber Threat Intelligence Analytics, Cryptography Analysis, Application Security Testing, Microsegmentation, Endpoint Detection and Response (EDR), and Insider Threat Analysis.* Worked to map vendors and tools to the MITRE Attack Framework and the Cyber Defense Matrix to identify gaps in the bank's security posture. * Presented at a conference the evolution of TLS to discuss the impacts of TLS 1.3.

Protecting your assets.* DevSecOps / Agile / Security as Code* Cloud Architecture* Responsible for the security design and standards to protect the company’s assets* Thinks like a bad actor in order to anticipate threats and applies controls to prevent the occurrence of security incidents * Assesses the risk and applies appropriate mitigations and suggest paths to remediation* Stays current on the latest developments both on the security end and the attacking end * All things AppSec; just ask

Responsible for strategic architecture and reviews on cross divisional architecture review team to ensure projects are following the correct design principles and standards in an effort to reduce O&M costs.Created solution architecture for near real-time integration between heterogeneous systems using pub/sub design patterns.Served as solution architect on multiple projects throughout lifecycle in a matrix environment; responsible for overall system architecture and creating the solution blueprint document.Planned architectural strategy for a $12 million upgrade project to remediate technical obsolescence.Developed and maintained divisional roadmap of IT initiatives to align with business priorities.Worked with business and technology partners to develop Business Technology Plan and Application Portfolio Management.Created infrastructure solution architecture for virtualizing hardware.Provided architectural standards, technical guidance, and domain knowledge of an infrastructure in-sourcing project.Served on enterprise architectural working team as a representative for division to influence, apply, and present standards.Presented a technical lecture at an IBM sponsored conference on integration and reporting architecture to a specific solution implemented at Duke Energy.Provided technical expertise and leadership on the Enterprise Asset Management $120 million project to implement a COTS solution of IBM’s Maximo (J2EE).Recommended performance improvements by analyzing JVMs on WebSphere, Verbose GC logs, SQL tuning, and coding implementations on a system with over 11,000 users.Created and enforced architectural standards, strategies, and vision for the Supply Chain and Work Management division.Lead development team of 15 onshore and offshore members during application testing phase to drive defect resolution and provided updates to PMO.

Developed enhancements for a C# .NET based application residing on 14,000 desktops in Deposit Contact Centers.Lead project to integrate LEAN with Offers Management and Interact creating enterprise channel integration to align with strategic vision of our leadership.Gained organizational recognition for designing, implementing, and integrating chat application to service customers.Received Spirit Medallion award and recognition for performance and technological expertise applied to the US Trust transition.Lead efforts for estimating and forecasting development efforts for the Countrywide transition.Coordinated integrated releases by managing development efforts per requirements; notably reducing defects by 88% from a previous release.Performed peer code reviews, provide input on design decisions, and debug coding issues with onshore and offshore resources.Coordinated and resolved defects for integrated testing phase throughout software development lifecycle.Completed High Level Design documents and Low Level Design documents based on requirements and provide consulting services to the lines of business.

Technical lead on multiple projects, including roles such as solution architect, lead developer, and test lead.IT analyst for successful Supply Chain and Work Management DataMart proof-of-concept project utilizing Informatica and SQL Server 2005 Integration Services and Reporting Services.Translated use cases into technical specifications for design documents.Enforced enterprise architectural standards on projects and provide designs as a solution architect.Developed custom solutions using ASP.NET and C#. Lead development effort to build integration between PeopleSoft and Remedy using a .NET web service.Provided detailed impact analysis and cost estimating metrics on impacts of PeopleSoft Financials upgrade.

Developed dynamic web-based applications with ASP, T-SQL, XML, XSLT, JavaScript, VB, and COM.Analyzed, maintained, tested, and debugged code.Provided Ad-Hoc SQL queries per customer request for special reporting needs.Created custom XML-based and SQL-based reports with Active Reports.Utilized Remote Access to implement DLL changes, maintain COM objects, implement updates and virus definitions, start/stop/reset IIS, and maintain SQL Server 2000 on Windows 2000 production servers.