Long Duong Email and Phone Number

• Product Security program development• Security policies, standards, and guidelines developments• API security, AI, Generative AI / Large Language Model (LLM) security• Security architecture assessment and risk mitigations, etc.

• Led governance, risk, and compliance (GRC) initiatives, including security architecture reviews, threat modeling, and risk assessments, ensuring alignment with business needs and regulatory standards.• Played a pivotal role in establishing a robust operational technology (OT) security program for the Consumer Health Care division, both pre- and post-company spinoff.• Championed cross-functional collaboration to enhance threat intelligence processes, security awareness, and tracking of key security KPIs and KRIs, identifying areas for improvement to strengthen the overall security posture.

• Acted as the liaison between BUs and the CISO team, ensuring alignment of security practices with business objectives.• Enforced and influenced security culture set forth by the CISO office, ensuring uniformity across business units.• Established and led the Product Security program, encompassing Security Architecture, GRC, and Security Awareness.• Worked with BUs to adopt the new operating model to shift security left, accelerate time-to-market, and minimize risk.• Led security efforts throughout SDLC, ensuring infrastructure & application security via risk assessment, 3rd party assessment, threat modeling, SAST, DAST, SCA, pentesting, implementing security controls and tools to mitigate risks.• Achieved 400% product catalog growth and tripled team size in three years, supporting Internet of Things (IoT), cloud, wearable health tech, and FinTech products, etc.• Partnered with leadership, legal, product, global clearance & sourcing teams to integrate security controls into initiatives.• Evaluated vendor solutions, security postures & SOW. Partnered with teams on security activities to optimize costs.• Performed budget, resource, and metrics planning to prioritize risk mitigation and enhance security management program effectiveness and maturity.• Supported incident responses and security issue investigations.

• Brought solutions to Comcast’s markets nationwide, aligned roadmap with cross functional and regional teams.• Designed and deployed private cloud solution from conception to production to support video recording, playback and streaming. This involved building the infrastructure from the ground up, led end to end integration/testing and ensured security compliance.• Trained and led team of 10 engineers deploying thousands of servers and applications across the country supporting millions of customers.• Provided automation guidelines for configuration and testing of applications that cut field deployment time by over 70%.• Resolved all software, hardware, network issues with vendors and teams.• Built key management server for team member(s) to use for encryption / decryption of DRM keys.• Deployed CDN streaming servers for next-generation VOD content delivery system in 10 markets.• Managed end-to-end QA, integration/test projects, long-term objectives, resource estimation, test plans and test cases.

Led legacy and next generation set-top box (STB) product lines. Devised requirements for software features that were deployed in millions of STBs. Acted as SME for responsible product features.• Worked with product manager, software development and other functional teams on product roadmap and to ensure design met customer requirements and operations. • Drove new products, features and initiatives in review meetings.• Set strategic direction, led detailed design, system-level requirement and use-case developments. Triaged and provided direction for troubleshooting of issues reported during test cycles and field deployment.• Published product functional specification for all functional areas (CEA-608/708, user interfaces, code download, etc.)• Partnered with local, remote and offshore teams to better understand and address priorities and expectations.

• Administered National Geospatial-Intelligence Agency (NGA) Program’s Data Center. Monitored and troubleshot network connectivity problems. Configured and modified configurations for Cisco routers and switches. Modified firewall rules to support application development teams.• Architected network bandwidth studies on U.S Coast Guard Enterprise Communication Wide Area Network (ECWAN) that involved Inmarsat satellite network and terrestrial networks. Designed, implemented and tested an ECWAN model, including data and VoIP traffics in OPNET. Evaluated compression, web-caching technologies, TCP optimization and new operational activities for network impact. Analyzed network and application performances, traffic patterns and forecasted network growth to optimize infrastructure. Published studies and received additional funding to add new assets and operational models.• Served as liaison between the government and General Dynamics to independently verify and validate (V&V) OPNET network models for WIN-T Program. V&V conceptual and detailed designs, algorithms and codes for the following models: SATCOM, Encryption Device, Network Topology Tool, OSPF, WAN Router and LAN QoS Device, and other tools, models and user manuals. Published reports and provided recommendations and feedback to enhance model design.

Supported U.S Army Installation Information Infrastructure Modernization Program (I3MP) to replace ATM with Gigabit Ethernet. Conducted site surveys and interacted with customer to gather data for network design. Developed network requirements and design to support new and existing networks.

Published multiple studies on traffic performance requirement for SNMP and network survivability of the network layer by examining MPLS, DiffServ, OSPF, RIP and BGP convergence, delay, rerouting and prioritization issues.

Supported RF and System Performance engineers with problems encountered with AMPS & CDMA cellular systems. Monitored cellular system quality and identified problem areas through statistical analysis and trending. Corrected drop/lost calls and interference problems to optimize system throughput. Modified UNIX shell script files to automate system performance data collection for system analysis.

Supported data communication and network engineers in the simulation of communication channels. Provided validation tests for new code releases on various protocols such as TCP/IP, IEEE 802.3, FDDI, etc.