Matthew Goodrich Email & Phone Number

Kirkland, WA, US

Irvine, California, US

• Built the foundations of the Vulnerability Management, Security Architecture and Engineering, DevSecOps, and Product Security programs.
• Developed a comprehensive roadmap for standardizing security controls across the product suite, and bolstering our capabilities in the areas of secrets management, data asset inventory, classification, retention, and.
• Led product and engineering efforts to achieve SOC 2 Type II, ISO 27001, and PCI compliance.
• Developed, implemented and refined the Secure Software Development Lifecycle (SSDLC), Application Security and Logging Standards, aligning with OWASP ASVS.
• Performed extensive threat modeling and provided consultation across all Alteryx products.
• Shaped the Product Security Incident Response (PSIRT) process, and actively participated in incident triage, containment, recovery, and post-incident activities.

Irvine, California, US

• Conducted multiple internal sessions aimed at enhancing security awareness across diverse audiences within the organization.
• Developed several design patterns for use in our products related to the elimination of hard coded encryption keys, and the secure handling of credentials.
• Designed and implemented an automated test framework to validate compliance with ASVS Level 1 requirements.
• Automated penetration test validation by developing tests and scheduling jobs to monitor for regressions continuously.
• Created hardened, golden container images for Ubuntu-based Go, Node.js, Java, Nginx, and Python environments with an automated update process.

Providing strategic guidance on product functionality/product market fit.

Seattle, WA, US

• Led engagements with clients across various verticals, including Telecommunications, Software, Consulting, Higher Education, Government, and Food & Beverage.
• Established the Security and Risk Services sub-practice in the Denver market, which served as a model for similar offerings across Slalom offices globally.
• Served as the AWS Security specialist on engagements, including building a PCI-compliant AWS Fargate environment, designing a new AWS PCI environment for a credit card manufacturer, and developing a home surveillance.
• Leveraged security frameworks and standards such as NIST 800-53, HITRUST CSF, and ISO 27000 series to help organizations align with more secure practices.
• Collaborated with numerous clients to build their cloud foundations and develop teams, knowledge, and processes to support their cloud journey.
• Presented security talks at several events in Denver, including BSides, Denver Modern Web, and the local OWASP chapter.

Manchester, Greater Manchester, GB

• Lead technical consultant in the Professional Services division focused on Identity and Access Management (IAM) architecture and implementation.
• Engaged with 5-10 Fortune 2000 clients weekly to provide end-to-end services, including design, development/implementation, training, and ongoing technical support for complex enterprise IAM systems.
• Directly engaged with business stakeholders, executives, architects, and developers to ensure the solution meets internal requirements and industry best practices.
• Specialized in authentication/authorization technologies and standards such as SAML, OAuth, and OAuth extensions like OpenID Connect (OIDC).
• Expert in the full Ping Identity suite of tools, including PingFederate, PingAccess, PingID, and PingDirectory.
• Developed a Password Recovery Module Plugin for PingFederate, later purchased by Ping Identity and integrated into the core product.

Bellevue, Washington, US

Led as the engineering manager, product manager and scrum master for a high-performing team of software engineers, playing a key role in the recruitment of new team members. Spearheaded the development and enhancement of processes to optimize the delivery of high-quality software with increased efficiency.Collaborated closely with local and global product.

Bellevue, Washington, US

Dynamic software engineering consultant engaged in contract-based work for a highly agile organization with a specialized emphasis on software integrations for distinctive hardware components. Core responsibilities involve the redesign, maintenance, optimization, and stabilization of the existing core business application.Lead the DevOps initiative.

Key contributions encompassed: database design and architecture, orchestrating the product architecture with a performance-centric approach utilizing the dependency inversion principle and fault tolerance principles. Proficient in product development using Kendo, C#, jQuery, and Microsoft Entity Framework ORM. Extensive experience with the VMware.

Colorado Springs, Colorado, US

Security engineer specializing in Identity and Access Management, with expertise in Single Sign-On Implementations, Federated Identity Management, User Provisioning, and Password Management.Served as a dedicated consultant, undertaking weekly travel to customer sites across the United States. Played a pivotal role in extending PingFederate to meet specific.

Fort Collins, CO, US

Progressing through the IT hierarchy during my tenure at Colorado State, I initially served as an IT help desk intern and eventually ascended to the role of the primary web application developer for the central IT department on campus. This journey allowed me to hone my web application development skills, particularly in C# ASP.NET.Throughout this period.

Bachelor Of Science, Applied Computing Technology

Education record