Aaron M. Email & Phone Number

California, United States

Denver, Colorado, Us

Vancouver, British Columbia, Ca

As a Staff Application Security Architect, I've played a pivotal role in safeguarding various technologies, from mobile and infrastructure to web3 and blockchain. My work has consistently balanced innovation with efficiency, enhancing security measures while optimizing resources and earning recognition for impactful contributions to application security architecture. Key achievements:• Developed a comprehensive security roadmap to seamlessly address vulnerabilities across platforms without significant architectural changes.• Identified and resolving critical bugs using existing and open-source solutions, enhancing security without additional costs.• Led the UX and backend redesign of a global NFT marketplace, significantly improving usability and security, and gaining early approval and press attention.• Implementing a 40% cost-saving strategy on GCP Key Management Service expenses through automated key rotation, maintaining security while optimizing costs.• Enhancing user experience by leading the design and prototyping of a guest checkout feature, reducing purchase time by 35% and receiving accolades for creativity and impact.• Quickly remediated major security vulnerabilities in a new NFT platform, earning positive client feedback and strengthening brand partnerships.• Incorporated machine learning in security testing for Web3, conducting smart contract audits, and designing secure machine learning pipelines.• Established a supply chain security program for blockchain development, setting standards and implementing mechanisms to prevent security breaches and disruptions.

Berkeley, Ca, Us

As an Associate Professor at UC Berkeley, I have been at the forefront of developing and delivering a state-of-the-art Cyber Security program. My commitment to integrating theoretical knowledge with practical, real-world experience has significantly contributed to the advancement of cybersecurity education. Through my leadership, students have been equipped with the skills necessary to thrive in the rapidly evolving field of cybersecurity.Key Achievements:• Led the creation of a comprehensive Cyber Security program, delivering 400 hours of coursework covering 12 essential domains, including System Administration, Cloud Security, and Ethical Hacking.• Integrated a curriculum focused on real-world experiences, incorporating live demonstrations and technical capture-the-flag challenges to ensure students gain practical skills alongside theoretical knowledge.• Mentored a diverse cohort of students, from recent graduates to seasoned professionals, fostering an environment that promotes superior academic performance and success rates.• Implemented personalized growth and performance strategies, achieving a GPA average of 3.5 and a student success rate of 92%, surpassing national benchmarks for similar cybersecurity programs

Ca, Us

As a Principal Application Security Engineer, I've been instrumental in the foundational design and deployment of a comprehensive application security program, dramatically enhancing our organization's security posture and developer education on security best practices.Key Achievements:• Established a robust application security program, introducing policies, procedures, guidelines, and training for over 100 developers.• Achieved a 40% reduction in critical security defects across projects within six months through effective vulnerability management and remediation strategies.• Enhanced security best practices adoption using innovative engagement strategies, including a pop culture-themed presentations to illustrate vulnerabilities, competitive capture-the-flag events, and educational security workshops for over 300 developers.• Ensured the security of a high-profile virtual racing competition with over 26K participants through the fast-tracked deployment of robust security protections.• Developed an infrastructure blueprint focusing on voice recognition and anti-cheating controls, validated through vulnerability modeling to proactively address security issues.• Performed comprehensive code reviews of up to 10K lines, promoting clean implementation and providing technical leadership to the development team through close collaboration.• Hired engineers with the right attitude and technical acumen for the application security team, devising insightful security interview questions and hands-on tests to accurately assess true skill levels, and providing valuable feedback to guide hiring decisions.

Greenwood Village, Co, Us

As a Staff Offensive Security Engineer, my expertise lies in leading cutting-edge penetration testing and compliance assessments to bolster cybersecurity measures for high-profile clients and critical infrastructure. My proactive approach in identifying and mitigating vulnerabilities has significantly strengthened security postures across various platforms.Key Achievements:• Spearheaded the penetration testing of a leading cloud service provider's machine learning platform for self-driving cars. This involved close collaboration with stakeholders to define the testing scope and develop a comprehensive playbook for assessing similar applications.• Successfully uncovered critical security issues in a high-profile project, achieving a 30% reduction in potential vulnerabilities. This effort was crucial to the project announcement's success, earning acclaim from a 1.4 million user base and securing an exclusive contract with the organization.• Led SOC2 and FedRAMP compliance assessments for cloud providers, ensuring meticulous planning, execution, and documentation that culminated in achieving certification. My role was instrumental in navigating the complexities of compliance standards to meet and exceed regulatory requirements.• Managed complex software testing scenarios, defining tactical operations for fast-paced assessments. I played a key role in mentoring testers, fostering an environment of continuous learning and excellence in testing practices, thereby enhancing the team's capability to confront and resolve emerging security challenges.

San Francisco, Ca, Us

As a Security Manager at Autodesk, I have led transformative initiatives to enhance the security posture and operational efficiency of our security team, directly contributing to significant cost savings and improved security measures. My leadership has not only revitalized an underperforming team but also fostered strong stakeholder relationships and driven technological innovations to protect Autodesk's infrastructure and data.Key Achievements:• Successfully revitalized the security team, leading to the critical achievement of SOC2 recertification. This effort resulted in an $800k reduction in operating costs and the completion of 200 security assessments within a six-month timeframe.•Repaired and enhanced stakeholder relationships through strategic rescaling of assessments and cultivation of strong partnerships, earning formal recognition from the Chief Information Security Officer (CISO) for exceptional leadership and achievements.• Conceived and drove the development of a centralized vulnerability management dashboard from initial concept to successful company-wide launch. This involved conducting user research, iterating prototypes, and designing an intuitive interface, which reduced friction by 30% and enhanced cross-team collaboration through an exceptional user experience.• Developed an automated MLops vulnerability prioritization pipeline that halved dwell time. I architected AWS data systems to improve model accuracy and led a cross-functional team to deliver a prototype in 90 days, significantly cutting manual triage efforts by 80%.

South San Francisco, California, Us

As a Security Manager at Genentech, I have significantly elevated our security posture and operational resilience. My leadership has transformed the security team, implementing strategic initiatives that drastically improved response capabilities and reduced the risk of breaches, all while ensuring business continuity in the face of potential disruptions.Key Achievements:• Successfully elevated the security team's maturity from level 1 to level 4 within a year. This was achieved through the implementation of automation, playbooks, and simulations, resulting in a 50% reduction in incident response times.• Spearheaded the creation of a threat intelligence program from the ground up. This initiative, which included securing executive buy-in and defining clear success metrics, leveraged social media monitoring and access log analysis to lead to an 80% decrease in breaches.•Played a pivotal role in creating and maintaining comprehensive business continuity and disaster recovery plans. These efforts ensure uninterrupted operations in the event of security incidents or natural disasters, safeguarding the company's operational integrity.

Master'S Degree, Cyber Security And Information Assurance

Bachelor'S Degree, Business Administration And Management, General

Associate Of Science - As, Computer Science