Robert Beltran Email & Phone Number

- Founded the Product Security team with the mission of reducing the risk associated with OA softwareand partnering with engineering teams around the world to increase our overall security posture.- Overhauled security program ensuring Developer Experience, Infrastructure, and Security initiativesare coordinated and executed resulting in the rollout of a DevSecOps strategy and a paved path forengineering teams.- Drove vision and aligned team on quarterly and yearly program roadmaps focusing on increasingsecurity posture and maturing our security organization as a whole.- Spearheaded Log4J Incident Response educating engineers and leadership across the org on thevulnerability, remediation and OSS libraries cutting our resolution time from weeks to days and setting anexample for other Oracle lines of business.- Achieved 100% automated scanner coverage of all apps guaranteeing they are continually scanned forSAST, SCA and Secret vulnerabilities covering 4000+ repositories quantifying our security risk so we canmeasure improvements.- Designed and launched code security guardrails program to global engineering teams making surethat new SAST, SCA or Secret vulns were captured at the merge request and kept out of production- Managed the design and verified implementation of secure solutions for OA’s version of bug bountyprogram and other findings from our dynamic security tests- Championed security to Oracle Sr. Leadership through the M&A program closing out stubborn securityfindings that had been affecting our LoB for years. Presented solutions and future roadmap to Oracle Sr.leadership resulting in minimal direct supervision moving forward

- Created a new Product Security Automation team tasked with scaling up the services of our ProductSecurity team across our engineering teams around the world.- Automated security scans and on-boarding all new apps created for the PS5 launch, scanning andremediating findings for 100% of the public facing web, console, and mobile apps for launch.- Engaged regularly with every team member from intern to contractor to senior engineer identifying areasfor growth and improvement while requesting feedback to keep my team operating at the highest level.- Designed and architected vulnerability management system to track security findings across allPlaystation Network(PSN) applications, resulting in faster triage of vulns (months to days) reducing ourissue backlog by an order of magnitude.- Leveraged team’s newly built vuln management system to create a Release Approval API allowingengineering teams to release software without direct AppSec engineer approval improving releaseapproval times from hours/days to on-demand.- Expanded the team size from three to six people and grew team responsibilities to include more tools,processes and services including pen test management, APK Signer, github based password scanner.- Presented a new team strategy to executive stakeholders and other high level leadership around theworld earning their buy in and commitment to the new security process.- Presented product security innovations and security research continually at internal engineeringconferences and brown bag sessions showing our commitment to continual integration and deploymentimprovements.- Managed the integration of security scans and automated release approval API into global CI/CDpipelines coordinating external team timelines and commitments.

San Diego, Ca

- Architected secure designs of new web applications, services, and client side applications from around the world- Performed static code analysis and a code reviews of projects across several languages and frameworks - Threat modeled applications pinpointing areas that were open to attack and exploitation resulting in recommendations for engineers and software architects to make their projects more secure- Scaled up application security to position us for the coming influx of large amounts applications as our company grew to include the Playstation hardware teams- Pentested webapps, web apis, clients and mobile apps- Built terrific relationships between the dev teams around the world and AppSec moving us to a new paradigm where the developers came to us from the start

Greater San Diego Area

Currently contributing to the Universal ID team creating a middle layer to access our global login system for authentication and account maintenance while also providing account reconciliation from our PS3 account databaseDesigning flows e.g. authentication, account update, account merging implementing server side code to accomplish this and writing cucumber based ( BDD ) tests with JRuby to make sure the system operates properly and fails elegantly Researched and recommended new framework for the Customer Management Tool (CMT) to empower the web devs and speed up the development process for the engineersDesigned and developed the new CMT from the ground up using the new framework. Including but not limited to CI server, new git based repo, unit tests and BDD framework, as well as load testingDesigned and implemented multiple features for the Playstation Network Product Management Tool (PMT) our content management system. Including the PS Plus user subscription service, Reward Pools, Pre-order systems, Stores for different countries, importing of new content files and design of new large file upload system for storing games above 20GB in size Practitioner of Agile/Scrum for more than three years now