Luis C. Email and Phone Number

I am a security professional with ample experience in providing security services for software products across their entire Software Development Life Cycle (SDLC). During my career I have occupied different software security positions from Security Engineer to Principal Security Architect and that has given me the expertise to design and operate a secure SDLC to ensure that a software product can operate securely in hostile environments.I have worked for security-centric software companies that provide complex security solutions with mobile, cloud and on-prem component but I have also worked for companies that offer non-security IoT devices along with their accompanying cloud services.Lately, I have been more focused on proactive security. This means, ensuring a new product (or a new feature of an existing product) design is secure enough by way of using formal threat modeling and secure design techniques to prevent, from the very beginning, that costly design flaws can make it to the implementation phase. However, I do believe that other more conventional security tasks in the SDLC are equally important and therefore, I have also taken care of some pen testing tasks and vulnerability responses for the products under my responsibility (including third-party components). Areas of Interest: Proactive security by using threat modeling/analysis and secure design. Secure coding practices for managed and unmanaged code. Reactive security via penetration testing techniques (including network penetration) and pen test tools. Design/review of security protocols. Applied cryptography for software products.