Matthew Valdes Email & Phone Number

San Jose, California, Us

London, Gb

Responsible for application security architecture across the business, created a detailed security requirements backlog for agile teams to adopt and integrate within the SDLC, and maintained relationships and continuous checkpoints to ensure the requirements were understood and adhered to, or disregarded based on context. Maintain Application Security tooling, and the supporting cloud infrastructure, including deployment/installation automation and system monitoring. Lead and contribute to the design and building of custom tooling to automate Application Security operations.• Represent CISO and the Application Security team when collaborating with project teams across the business to ensure adherence with internal standards, as well as compliance and regulatory requirements.• Promote OWASP best practices, such as ASVS and proactive controls, throughout the entire application development lifecycle, with a focus on SDLC integration and a “shift-left” security mindset.• Deploy and maintain cloud infrastructure (EC2, RDS, Docker Compose) for Application Security tools consisting of custom, open source and COTS software systems, such as BlackDuck Hub and Defect Dojo.• Specify, design and develop custom automation for Application Security reporting and tool integration (Checkmarx, AppSpider, BitBucket) using Python in conjunction with AWS services (API Gateway, Lambda, SQS, KMS, Secrets Manager, Cloud Trail. etc.).• Mentor Security Engineers on testing strategies and test plan development, as well as remediation planning and communication.• Perform tech talks and workshops for Development, Engineering and Quality teams to introduce security testing methodologies and tools, and to walk-through common vulnerabilities and misconfigurations.• Research new or revised security controls and document the requirements into technical solutions that both enable the business and improve the overall security posture of the business

San Antonio, Texas, Us

Establish and maintain professional relationships across the Rackspace development, engineering and security landscape by providing security requirements, consultation and testing throughout all phases of the product SDLC. Areas of involvement include application development, architecture and infrastructure engineering for multiple projects, as well as ongoing processes, with environments spanning internal dedicated environments, various cloud providers, such as AWS and CloudFlare, and anything in between. • Conduct vulnerability assessments, including threat modeling, application and network penetration tests, and code reviews against greenfield and legacy API’s and web applications.• Mentor junior Security Engineers with test strategy and test plan development, testing efforts and automation, in addition to remediation planning and communication.• Represent the Security Engineering team when collaborating with other internal security groups, such as enterprise security teams, risk and compliance, and ISOC to • Coordinate with cross-functional teams’ architects, developers, engineers and leadership to perform application security assessments and ensure adherence with internal standards, as well as compliance and regulatory requirements, and promoting OWASP best practices throughout the entire application development lifecycle• Perform tech talks and workshops for Development, Engineering and Quality teams to introduce security testing methodologies and tools, and to walk-through common vulnerabilities and misconfigurations.• Research new or revised security controls and document the requirements into technical solutions that both enable the business and improve the overall security posture of the business.• Create and maintain security reporting and development backlog to identify and classify security risks and trends, as well as their remediation

Toronto, Ontario, Ca

Facilitate and enable system and process integration, implementation and improvements through collaboration with cross-functional stakeholders throughout all levels of the organization and across three countries and fourteen locations. Successfully lead a project to deploy the company’s largest customer server order (2000+) across three locations throughout North America, requiring new datacenter build-out, non-standard server hardware and a custom imaging solution.• Elicit and document business, process and technical requirements for in-house and off-the-shelf applications including automation, CRM, shopping cart and ticketing systems through interviews, focus groups, observation and prototyping.• Coordinate software development lifecycle: analysis, design, development, testing, deployment and root cause identification,• Lead cross-functional groups to consensus on requirements, requirements prioritization and business process changes.• Propose solutions in consideration of timeliness, effectiveness and practicality in addressing client needs.

Toronto, Ontario, Ca

Lead a team of 4 responsible for maintenance and improvements of customer portal, shopping cart, internal customer account management, provisioning, invoicing, inventory tracking and ticketing systems.• Prioritize defect corrections and feature requests• System administration - Debian Linux, Windows 2003 Server• Software Development - PHP, Perl, bash• Maintain, update, re-factor and document existing systems• Database administration and reporting – PostgreSQL, MySQL, MS Reporting Services, Visual Studio

Toronto, Ontario, Ca

Lead a team of four, including technical, customer service and billing representatives. Acted as the point of escalation for technical and customer service issues regarding set-up, maintenance and security of Linux and Windows server operating systems, in addition to their associated web, email, FTP, DNS, database and control panel applications.

Associates, Network Administration

Education record