Steven Driver Email & Phone Number

San Francisco, California, Us

Design, develop and implement secure software best practices for the Enterprise Application Security Program at Wells Fargo. As part of the Secure Software Development Lifecycle (SSDLC) program, I am responsible for the security requirements program. I manage the security requirements and design tools, like SD Elements from Security Compass. I work collaboratively with application and security champions early in the SDLC to establish security requirements through modeling and research activities. I help educate application stakeholders to understand relevant security issues, including practical strategies for fully mitigating or partially compensating the associated risks I participate in defining, reviewing, and promoting information security policies, standards, guidelines, and procedures I also participate in internal process improvement initiatives. I mentor junior staff as the SME in security requirements. I have an understanding of common industry security categorization schemes, such as STRIDE and common industry risk ranking models, such as DREAD, CVSS, OWASP Risk Rating Methodology. I build and deliver training content (Brown Bags, ) to Developers, Testers and other security professionals. I identify emergent software security vulnerabilities and threats and design methods to identify those vulnerabilities and provide remediation alternatives. Consult and design threat models for the Secure SDLC process. Developed the safe coding standards for Cloud environments, Amazon AWS and Microsoft AZURE. Develop safe coding standards and guidelines for the development teams in Java, C, and Mobile development. Subject Matter Expert (SME) responsible for application security and software security best practices. Consult with development groups on the implementation of Security Development Lifecycle best practices and tools. Research, development and /or customization of software security tools and libraries.

Tampa, Fl, Us

Managing the SDLC process for a new product development. Functioning in the role of a Project Management and the Application Information Security SME for HIPPA / HITECH.

Louisville, Ky, Us

Application Development Director, Stored Value Solution / Comdata (SVS) /FleetcorInfoSec: I developed the SDLC program from secure coding with SVS. Completed the analysis of a vector threat model for all web based applications. I instituted quality code reviews, paired programming, unit testing and OWASP security standards within the team. Lead the static and dynamic (pen testing) of the SVS web applications. Developed the training materials and trained the development staff on OWASP top ten Web Application Security Risks. Introduced and trained on web scanning tools like IBM AppScan, Nessus and Veracode.Application Development: I am the director of application developer for Internet (web) application. My team and I manage multiple web based applications that are used worldwide by SVS clients. Each application supports international languages, foreign currency and foreign locations. During my tenure at SVS, I have built a high performing team that produces quality code on time and within budget. Before coming to SVS the web team produced 10 maintenance releases in 2010. After reworking the SDLC process the team produced 55 maintenance (enhancements) releases and three new products in 2011 all without any deployment errors. In 2012-2015, I decreased the support phone calls by 44% from the previous year. As part of the SDLC redesign, I manage a three development team, two on shore teams and one off shore team in Mauritius. For SVS and Comdata, I teach the secure coding class to all the development staff.

Arlington, Virginia, Us

Manager responsible for the development and deployment of mainframe and web based application for the Louisville KY office. I am managing a team of 15 developers for support of the Area Settlement Plan (ASP) and Java based applications. The ASP system is a COBOL based back office settlement system for carriers and travel companies to settle financial transaction between travel providers, agents and credit card companies. Responsible for establishing the strategic plan for organizational health and developer cross training. Implemented scrum development methodology with ARC development offices in Louisville and Tampa. Lead the scrum training project to educate over 90 developer and product owners.

Responsible for all of the development, budget management, support and deployment of Internet, intranet applications and Internet payment systems. Managed the 1.6 million dollar budget for the e-commerce group and averaged 10% under budget each year. Developed systems and cost saving to save BAMS, 1 million dollars in development cost on a 4.5 million dollar project. My team was responsible for the development and deployment of a customer service reporting website to facilitate merchants obtaining self-service information. NPCAcess.net reporting website was developed using leading edge technologies to improve the capabilities of merchant reporting. Responsible for establishing the strategic plan for e-commerce payment systems. Deployment of the Clear Commerce Payment gateway that has the capacity for 10 million transactions per year and provided NPC a return on investment of development and deployment cost in 6 months. Developed an Internet payment site for accepting electronic checks on the web called VirtualPAY. The VirtualPAY web accepts payment for e-commerce site in volumes in excess of 10 million dollars per day. I have served on the corporate security task force. The task force established the NPC security policy for all IT departments. I am responsible for Application security development, application security architecture and application security practices.

Design and implement GIS applications and models for clients of the Polis Center, Advanced Information Technologies (AIT) division. Assist with project management of AIT initiatives; work with clients to establish application needs and priorities. Manage the design, programming, development, testing and implementation of complex applications and models. Design, specify and implement applications to achieve client application needs; design and implement spatial models for company and client use in a GIS/AM/FM system. Manage and develop the Center’s Web site (http://www.thepoliscenter.iupui.edu) as a marketing and information tool for our clients. Developed the Social Assets and Vulnerability Indicators web site for the Central Indiana United Way. (http://www.savi.org) Managed the Center’s Web Site and Windows NT 4.0 Network implementing user profiles, system security and network resources.