• Directed the project goal of remediating over 95% of outstanding software vulnerabilities within assigned applications to achieve individual and organizational KPI’s within Java source code and dependencies using SAST tools such as Snyk and SonarQube.• Acted as a security subject matter expert, collaborating with cross-functional teams to ensure applications and infrastructure met security compliance and secure software development lifecycle (SDL) standards.• Utilized automation in security assessments and integrated SAST tools (e.g., Snyk) into CI/CD pipelines (GitHub Actions) to ensure compliance with security policies.• Performed application security assessments for Java-based applications, addressing vulnerabilities such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF), among others.• Supported and maintained critical warehouse applications during scheduled hours and off hours as required.• Investigated, tested, and documented application bug fixes, enhancements, and new software releases within Java and C code base.• Investigated and documented root causes of issues with in-house supply chain management software and implemented improvements to prevent future recurrences.• Collaborated with compliance teams to manage and triage security incidents and vulnerabilities, coordinating incident response efforts to minimize risks.• Developed tools and dashboards for security data visualization using Python and GitHub Actions, allowing better decision-making for security compliance.• Assisted team members on assignments including mentoring and providing training.• Assisted with Kubernetes deployments including monitoring and scaling of Docker containers in support of secure cloud infrastructure.

Led security incident response efforts, developing automated workflows helping to improve response times and ensure timely remediation of reported security incidents.• Managed SQL databases, ensuring they met data security compliance standards and applied encryption to protect sensitive information.• Used Kace endpoint management tools to configure automated cloud based security updates, software distribution, and patch management.• Handled identity and access management (IAM) and information protection through the deployment of security measures such as Multi-Factor Authentication (MFA), improving the security of internal applications.• Design, develop, and implemented ServiceNow applications, including customization, integration, and workflows.• Knowledge with Windows/Linux operating system configuration.• Broad knowledge of hardware, software, and networking for providing support for over 500 users in various City departments.• Managed projects, vendors, and organized Microsoft suite training for 100’s of City of Cincinnati employees.• Implemented improvements and maintained Windows server and Active Directory infrastructure.• Hands on experience with enterprise networking, switches, TCP/IP protocol, firewalls, and intranet/extranetenvironments.• Delivered security guidance to stakeholders, ensuring compliance with security protocols and protecting the City of Cincinnati’s digital infrastructure.