I was tasked with working closely with the Verizon security team and an third party security vendor to aid in the creation of a new threat modeling tool for Verizon’s applications.To start my project I had to learn what threat modeling was and how it is important to a companies applications. Threat modeling is an imperative tool an applications security, as it provides a structured visual representation of all the security needs throughout an applications entire lifespan. This helps bridge the gap between security teams and application development teams when it comes to understanding the safety of an application.I was tasked with being hands on with the implementation of this process , but also I was in charge of creating a detailed documented knowledge base to allow application teams throughout the company to understand what threat modeling was, why it was needed and how to implement it.Since this was a completely new process working between many different teams, there was a lot of confusion involved . So throughout my project not only did I learn many new technical skills I learned lots of soft skills as well such as organizational skills, project management skills and presentational skills. At the end of my internship I presented my project to our companies Senior Vice President and Global CIO.

I was tasked with learning and utilizing Verizon’s now previous security process to identify vulnerabilities and false positives within their applications. Once learned I then had to develop an automated version of this process to increase the security team’s efficiency, lower their workload and ultimately reduce the chance of human error.To start I closely studied the OWASP Top 10 list of vulnerabilities so that I can have a increased knowledge on the vulnerabilities we would be detecting. Once learned I then utilized numerous security tools to scan hundreds of applications within Verizon’s network in search of vulnerabilities and false positives. Finally after receiving a good understanding of the current process I began to develop a new and improved version. I utilized Python and GitHub to create programming scripts which implemented automation into this process.