I act as the architectural lead for a team of eight developers who are building a security governance platform for the multi-billion dollar FirstNet program. Additionally, I run the vulnerability management program, for FirstNet, which resulted in reducing the overall vulnerability footprint by 60% in the first year. I also participated in contractual negotiations with 14 vendors to enforce tighter vulnerability remediation timelines. I regularly author and present vulnerability metrics and… Show more I act as the architectural lead for a team of eight developers who are building a security governance platform for the multi-billion dollar FirstNet program. Additionally, I run the vulnerability management program, for FirstNet, which resulted in reducing the overall vulnerability footprint by 60% in the first year. I also participated in contractual negotiations with 14 vendors to enforce tighter vulnerability remediation timelines. I regularly author and present vulnerability metrics and read outs for executive leadership and government agencies supporting the FirstNet program. Other responsibilities include, writing security policy, and partnering with peer security organizations to spread enhanced security outside of FirstNet. Show less

As an Android security SME, I performed pre-release security testing of Android devices. I also built an automated, remotely accessible, Android security testing platform. Leveraging decommissioned hardware, open source software and custom scripting. This reduced testing time by 50% and saved the company over $1,000,000 annually by not purchasing commercial alternatives. Acted as a representative for AT&T as part of the GSMA eSIM working group. Finally, I authored AT&T’s internal security… Show more As an Android security SME, I performed pre-release security testing of Android devices. I also built an automated, remotely accessible, Android security testing platform. Leveraging decommissioned hardware, open source software and custom scripting. This reduced testing time by 50% and saved the company over $1,000,000 annually by not purchasing commercial alternatives. Acted as a representative for AT&T as part of the GSMA eSIM working group. Finally, I authored AT&T’s internal security policy in regards to UICC/SIM technology. Show less

In this role, I supported development and lab environments for the Digital Life suite of products which included system administration, application support, and security administration. I also created tools to automate configuration to align systems with security hardening requirements; this annually saved approximately 400 hours of manual labor. Furthermore, I developed a utility to eliminate metadata waste when provisioning customer which saved 20 terabytes of storage a year and reduced… Show more In this role, I supported development and lab environments for the Digital Life suite of products which included system administration, application support, and security administration. I also created tools to automate configuration to align systems with security hardening requirements; this annually saved approximately 400 hours of manual labor. Furthermore, I developed a utility to eliminate metadata waste when provisioning customer which saved 20 terabytes of storage a year and reduced outages related to metadata capacity exhaustion. I increased performance of real time video streaming by 300% by identifying silent firewall degradation. I also performed audits of all alarm strings, reducing our false alarm rate by over 90%. Finally, I backported the entire software stack to RHEL5 in order to enable TLS1.1 support in order to meet new security requirements. Show less

In this role, I provided last line of support for the Ericsson Multiservice Proxy (MSP) application. This platform constituted 4000 servers processing traffic for 130,000,000 customers on the AT&T mobility network. I also acted as liaison to the Chief Security Office. This included fixing vulnerabilities on our servers, creating tools to ease the mitigation process, documenting non-compliance and serving on the governance board in order to shape Corporate Unix security policy. Finally, I… Show more In this role, I provided last line of support for the Ericsson Multiservice Proxy (MSP) application. This platform constituted 4000 servers processing traffic for 130,000,000 customers on the AT&T mobility network. I also acted as liaison to the Chief Security Office. This included fixing vulnerabilities on our servers, creating tools to ease the mitigation process, documenting non-compliance and serving on the governance board in order to shape Corporate Unix security policy. Finally, I designed and built a production support lab for our Digital Life platform, leveraging virtualization technology. This $100,000 lab was functionally equivalent to the performance testing environment that cost $5,000,000. Show less