Peter Xiao Email & Phone Number

San Jose, Ca, Us

Engineering Director, Cloud Collaboration Technology Group, 2010 − 2014Senior Manager, Cloud Collaboration Technology Group 2007 − 2010- Lead a large engineering organization located in both US and China and responsible for the development and delivery of the $1 billion WebEx conference service.- Lead many initiatives and transformations in the areas of product directions, process, operations, and technology to improve productivity, security, quality, and technology competency.- Core contributor to Cisco’s SaaS PSB (Product Security Baseline). Today, it is the security standards for SaaS application development at Cisco. Honored with security Black Belt, the highest honor in Cisco for the security leadership.- Partner with Cisco various corporate security teams in conducting security practice for WebEx business including setup security process, coding standards and requirements, etc.. and oversaw security auditing, compliance, public advisory and certification etc.- Oversaw the end to end WebEx (SaaS) development lifecycle with SDL (Secure Development Lifecycle) in Agile format including CI&CD for WebEx conference services. WebEx service won the Product Security Champion Award twice at Cisco (2009 & 2010)- Designed the security architecture including authentication, authorization, and data protection and lead the implementation with standard technologies such as PKI, SSL, AES, SHA2, SAML etc. for WebEx conference services.

Engineering director and Chief Security Architect, 2005 - 2007Senior Manager and Chief Security Architect, 2004 - 2005Senior Security Architect, 2003 - 2004- Hired as senior security architect initially then grew to manager, senior manager and chief security architect and director before acquired by Cisco in 2007. Managed the security, QA, and WebEx client groups with resources located in US and 3 cities in China.- Created and oversaw the end-to-end WebEx SaaS development lifecycle with SDLC (Secure Development Lifecycle) with various security controls including threat modeling, secure coding standards, SAST, DAST, and code assisted pentest. - Designed and oversaw the layered WebEx service security architecture including authentication, data privacy, and access control etc.. - Redesigned and build the WebEx client with layered and componentized design to improve the performance, extensibility, and portability etc.- Build the first generation of MMP (Multi-Media Platform) for video and VoIP services in WebEx meetings.- Lead the transformation of testing from manual to automation. Initiated and delivered test automation framework with a combination of open source (Selenium) and home grown tools (MagicBoat). Created the quality exit criteria for releases

- Managed the security group who is responsible for the security architecture and implementation for the Liberate Technologies’ Interactive TV software running on set-top boxes. - Customized OpenSSL library to reduce its code size and improve its performance so that it fits into the set-top boxes with limited computing resources (CPU, memory etc.)- Invented and implemented a PKI based trust delegation model for software deployment in a tri-pod model involving software vendor, set-top box manufacturer, and cable carriers

Holmdel, New Jersey, Us

Responsible for the security of the first generation internet platform GeoPlex. Designed and implemented a PKI based secure protocol among other responsibilities for client and server communications.

Executive Training Program

Ph.D, Security, Cryptography, Mathematics

Education record