Kelvin Xu Email & Phone Number

Oakland, California, Us

San Jose, Ca, Us

San Jose, Ca, Us

• Created and ran a security champions program to drive security awareness and to create an extension to the security team• Created and managed eBay’s secured SDLC process - putting a wrapper around security processes where developers can secure their code• Deployment of AppSec security policies across a large group of applications exceeding 2000+• Support and consulted with 500+ teams to guide them through how to secure their projects• Managed security bug SLAs to drive the closure of the security issue• Weekly reporting on security bug metrics to show the current state of security and how teams are progressing with their open issues• Managed SD Elements, a threat modeling tool, and created custom tasks for developers to receive relevant security tasks for their projects• Integrated SAST tools with Jenkins to automate security scanning

San Jose, Ca, Us

• Worked with the program creators to have enhancements to rule-packs and application configurations adjusted as issues were identified within the SAST process• Vetted an enterprise wide pilot for CheckMarx as a new SAST tool, having previous experience with SAST. I was able to ensure certain pitfalls were avoided prior to the production release• Ran a responsible disclosure program and worked with various vendors for external managed bug bounty programs• Built a process behind how to comply with GDPR standards and drive the effort through automated ticketing

San Jose, Ca, Us

• Onboarded SAST and DAST tools and kicked off the introduction of application security scanning and remediation within the SDLC• Deployed and implemented automated static and dynamic application testing tools and procedures to make application security testing a standard process• Enhancements to rule-packs and application configurations adjusted as issues were identified within the SAST process

San Jose, Ca, Us

• Trained developers on introductory and advanced application security best practices and methodologies• Helping promote a security-first culture by helping drive and organize eBay’s Biannual Capture the Flag event—an educational exercise that allows participants to learn about vulnerabilities and exploits and, in turn, use that knowledge in building more secure applications • Research and develop security tools, techniques, automation and process improvements to increase team efficiency by automating the data collection process and documenting the information for future analysis

Boston, Massachusetts, Us

• Year Up is a leading one-year career development program with 250 corporate partners around the country; the program includes college-level courses, professional training, and a six-month internship• Enrolled in the Cyber Security track to prepare for an application security role• Earning 25 college credits toward a computer engineering degree in partnership with Foothill College