Matthew Goodrich Email & Phone Number

Kirkland, Wa, Us

Irvine, California, Us

• Built the foundations of the Vulnerability Management, Security Architecture and Engineering, DevSecOps, and Product Security programs.• Developed a comprehensive roadmap for standardizing security controls across the product suite, and bolstering our capabilities in the areas of secrets management, data asset inventory, classification, retention, and deletion, and export compliance. • Led product and engineering efforts to achieve SOC 2 Type II, ISO 27001, and PCI compliance.• Developed, implemented and refined the Secure Software Development Lifecycle (SSDLC), Application Security and Logging Standards, aligning with OWASP ASVS. • Performed extensive threat modeling and provided consultation across all Alteryx products.• Shaped the Product Security Incident Response (PSIRT) process, and actively participated in incident triage, containment, recovery, and post-incident activities.• Delivered presentations at various internal and external forums on the security aspects of the Alteryx product suite.• Partnered with numerous customers and prospects to streamline the sales journey, delivering precise responses to security inquiries and minimizing obstacles.• Engaged as a mentor in various programs providing guidance to early-career employees and facilitating learning opportunities.• Spearheaded the creation of security use cases within the Alteryx product suite, engaging in internal discussions and presentations with existing and prospective clients.

Irvine, California, Us

• Conducted multiple internal sessions aimed at enhancing security awareness across diverse audiences within the organization.• Developed several design patterns for use in our products related to the elimination of hard coded encryption keys, and the secure handling of credentials.• Designed and implemented an automated test framework to validate compliance with ASVS Level 1 requirements.• Automated penetration test validation by developing tests and scheduling jobs to monitor for regressions continuously.• Created hardened, golden container images for Ubuntu-based Go, Node.js, Java, Nginx, and Python environments with an automated update process.

Providing strategic guidance on product functionality/product market fit.

Seattle, Wa, Us

• Led engagements with clients across various verticals, including Telecommunications, Software, Consulting, Higher Education, Government, and Food & Beverage.• Established the Security and Risk Services sub-practice in the Denver market, which served as a model for similar offerings across Slalom offices globally.• Served as the AWS Security specialist on engagements, including building a PCI-compliant AWS Fargate environment, designing a new AWS PCI environment for a credit card manufacturer, and developing a home surveillance streaming integration for a major telecommunications company.• Leveraged security frameworks and standards such as NIST 800-53, HITRUST CSF, and ISO 27000 series to help organizations align with more secure practices.• Collaborated with numerous clients to build their cloud foundations and develop teams, knowledge, and processes to support their cloud journey.• Presented security talks at several events in Denver, including BSides, Denver Modern Web, and the local OWASP chapter.• Created internal training on topics such as Defense in Depth/OWASP Top 10, AWS Security Automation, Container Security, Identity and Access Management standards and patterns, Open-Source Intelligence (OSINT), and Passwords.

Manchester, Greater Manchester, Gb

• Lead technical consultant in the Professional Services division focused on Identity and Access Management (IAM) architecture and implementation.• Engaged with 5-10 Fortune 2000 clients weekly to provide end-to-end services, including design, development/implementation, training, and ongoing technical support for complex enterprise IAM systems.• Directly engaged with business stakeholders, executives, architects, and developers to ensure the solution meets internal requirements and industry best practices.• Specialized in authentication/authorization technologies and standards such as SAML, OAuth, and OAuth extensions like OpenID Connect (OIDC).• Expert in the full Ping Identity suite of tools, including PingFederate, PingAccess, PingID, and PingDirectory.• Developed a Password Recovery Module Plugin for PingFederate, later purchased by Ping Identity and integrated into the core product.• Experienced with user provisioning standards such as Cross-domain Identity Management (SCIM) and identity governance and administration (IGA) products like SailPoint IdentityIQ (IIQ).• Comprehensive understanding of all components involved in IAM stack buildout, including software procurement, service account creation, server configuration, DNS, PKI, firewalls, load balancing, proxies, Disaster Recovery (DR)/Business Continuity Planning (BCP), and Security Information and Event Management (SIEM).• Owner of Risk Assessment activities for all code delivered to the customer, typically including source code scanning, vulnerability scanning, and penetration testing.

Bellevue, Washington, Us

Led as the engineering manager, product manager and scrum master for a high-performing team of software engineers, playing a key role in the recruitment of new team members. Spearheaded the development and enhancement of processes to optimize the delivery of high-quality software with increased efficiency.Collaborated closely with local and global product, business, and engineering units to foster innovation and contribute to the creation of a seamless, comprehensive, and reliable product experience. Oversaw the entire product lifecycle, from crafting the product roadmap to executing project plans, obtaining QA signoff, ensuring robust documentation, and managing the release process.

Bellevue, Washington, Us

Dynamic software engineering consultant engaged in contract-based work for a highly agile organization with a specialized emphasis on software integrations for distinctive hardware components. Core responsibilities involve the redesign, maintenance, optimization, and stabilization of the existing core business application.Lead the DevOps initiative, steering activities such as TFS upgrade, gated check-ins, and implementing continuous build/deployments for Windows services, web applications, and databases. Executed a comprehensive redesign using an n-tier approach, incorporating REST services and dependency injection. Ensured the quality of all code through meticulous comment-based documentation, unit tests, and integration tests when applicable.

Key contributions encompassed: database design and architecture, orchestrating the product architecture with a performance-centric approach utilizing the dependency inversion principle and fault tolerance principles. Proficient in product development using Kendo, C#, jQuery, and Microsoft Entity Framework ORM. Extensive experience with the VMware virtualization suite of tools. Demonstrated expertise in product development using agile methodologies.Noteworthy projects include the creation of Windows PCI Compliance scripts for server operating systems, redevelopment of the customer portal, implementation of Team Foundation Server 2013, and various internal projects.Expanded knowledge and familiarity with enterprise service buses, orchestrating a transition from a pull-based architecture to a push-based architecture. Explored ElasticSearch and provided recommendations on leveraging its capabilities in specific areas.

Colorado Springs, Colorado, Us

Security engineer specializing in Identity and Access Management, with expertise in Single Sign-On Implementations, Federated Identity Management, User Provisioning, and Password Management.Served as a dedicated consultant, undertaking weekly travel to customer sites across the United States. Played a pivotal role in extending PingFederate to meet specific customer requirements, contributing to the design and implementation of Single Sign-On integrations for customer applications.Demonstrated proficiency in a broad spectrum of security domains, including Network Architecture, Systems Hardening, Penetration Testing, Business Continuity, Audit Logging, Security Policy and Standards, Secure Application Development, and Regulatory Compliance (HIPAA, PCI DSS). Additionally well-versed in Security Design Patterns.

Fort Collins, Co, Us

Progressing through the IT hierarchy during my tenure at Colorado State, I initially served as an IT help desk intern and eventually ascended to the role of the primary web application developer for the central IT department on campus. This journey allowed me to hone my web application development skills, particularly in C# ASP.NET.Throughout this period, I undertook diverse responsibilities, including the management of a sub-domain within the forest and supervision of over 25 employees responsible for operating the university computer labs. I had the privilege of being mentored by accomplished university professionals, an experience that equipped me to later mentor others in turn.

Bachelor Of Science, Applied Computing Technology

Education record