Ken Mcdonald Email and Phone Number

• Set technology vision and strategic direction for development and business needs• Built a team of Developers, Security Engineers and DevOps Engineers• Delivered customizable DevSecOps Automation Platform tailored to incorporate security within modern development workflows and tailored to meet needs of developers• Built relationships and partnerships with several Application Security vendors, including a formal partnership with HP (eventually Microfocus)• Developed a team-oriented culture, yielding results and high productivity• Lead team for Application Security, DevSecOps and Cyber Security consulting services• Built team with expertise in many DevOps technology, including CICD and Infrastructure as Code tools• Was trusted advisor to CIOs and CISOs for technology strategy• Custodela was acquired by Checkmarx

• Responsible for implementing and operationalizing an Application Security Programaligning to BSIMM maturity model• Identified application security vulnerabilities and provided resolution advice todevelopers• Conducted application penetration tests, risk assessments and threat modellingexercises of complex financial systems• Introduced secure coding guidelines, security champion program and secure codetraining program• Introduced end-to-end SAST automation solution using CI with Jenkins, Stash/GIT,HP Fortify, JIRA and custom JavaEE application

• Performed role of Security Architect & Engineer• Performed Security architecture reviews and risk assessments on Symcor financialapplications• Helped define, implement and maintain Information Security solutions to support the• Information Security Architecture strategy and integrate Information Securityrequirements within new and existing technologies• Designed and developed various security solutions used for tracking, reporting,monitoring, and alerting using various technologies depending on specific use cases(Java, Perl, Python, php, COBOL)• Provided security architecture direction and guidance for initiatives relating to PCIcompliance