Karl Spaeth Email and Phone Number

• Drive the design, implementation and enhancement of DevSecOps and Application Security assessment tools and processes including SAST, DAST, SCA, Penetration Testing, and Bug Bounty programs.• Led a team of Cybersecurity analysts, providing coaching on the execution of designed ApplicationSecurity processes and offering mentorship for their career growth.• Execute reviews and assessments of the Bank's vulnerability management and secure software designprocedures, identifying gaps and recommending solutions.• Championed security best practices throughout the software development lifecycle, including serving as an admin of the Bank's Cybersecurity Champions program.

• Design and implement processes and procedures related to the Bank's application security testingprogram including expanding and improving the Bank's secure software development program andimplementing a Bug Bounty program.• Assisted in developing risk management strategies by identifying potential weaknesses andrecommending remediation.• Train Vulnerability Analysts and Specialists on program enhancements.

• Led execution of vulnerability assessments across the Bank's network and applications through SAST,DAST, Penetration Testing, and vulnerability scanning.• Validated vulnerability remediation efforts, serving as Tier 2 escalation support for analysts withadvanced technical troubleshooting capabilities.

• Scoped, deployed, and configured SIEM solutions at customer sites, optimizing cybersecurity infrastructure for enhanced threat detection and response capabilities, while acting as the primary technical liaison for clients.• Reviewed escalated alerts from Tier 1 analysts, conducting risk assessments and advising clients on incident response strategies to mitigate potential threats effectively.

• Scoped, deployed, and configured SIEM solutions at customer sites, optimizing cybersecurity infrastructure for enhanced threat detection and response capabilities, while acting as the primary technical liaison for clients.• Reviewed escalated alerts from Tier 1 analysts, conducting risk assessments and advising clients on incident response strategies to mitigate potential threats effectively.