Terence N. Email & Phone Number

Los Angeles Metropolitan Area

• Responsible for creating more agile and innovative IT environments across the agency. Provides vision, leadership and direction for managing technology operations (e.g., software development, telecommunications, data.
• Designs, develops, and implements resources and roadmaps, policies and procedures, and short- and long-range objectives.
• Provides strategic and operational leadership for IT administration, infrastructure and security, fostering a culture of collaboration and innovation.
• Managed multiple teams of Federal and Contracted staff 85+ with annual budget of 37M enabling the CIO to facilitate change and adeptly balance resources and priorities.
• Experience with contract and vendor negotiations. Cancelled failing cloud migration project, built in house team 1.5M in contract cost, and 500k per year in annual extended support costs.
• Consolidated multiple tiers of helpdesk into one saving 30% on helpdesk costs – this also improved relationships with previously dissatisfied customers like HR and Payroll, which led to increase in budget for IT.

Washington D.C. Metro Area

• Served as the Information System Security Officer (ISSO) and Data Warehouse Task order manager for AmeriCorps.
• Supported the information assurance program and risk management framework within the IT portfolio of information systems.
• Conducted risk and vulnerability assessments of planned and installed information systems.
• Coordinated implementation of IT security programs across platforms while serving as an Information Assurance SME.
• Developed IT vulnerability reporting criteria, managed a computer security incident response team (CSIRT) from discovery through concluding, including delivery of after-action reporting to executives.
• Worked with system owners to certify and accredit systems while also monitoring and supporting closures of plans of actions and Milestones (POAM's).

Washington, DC

• As a Senior Security Code Reviewer and Web Application Security tester, performed penetration testing and source code security reviews, configured and removed false positives, managed secure software development.
• Gained experience with security tools like Burp Suite, OWASP ZAP, Fortify, CheckMarx, AppScan Nessus.
• Conducted source code security reviews which involved both developed in-house and components of open source software stacks consisting of web mobile code, JAVA J2EE, database code, in an application inventory that.
• Converted source code security reports into penetration test plans.
• Performed or led performance of all web application security testing to evaluate complexity of exploitability, reconfigure scanners and planned and prioritized software development tasks to mitigate vulnerabilities.
• Demonstrated experience utilizing static and dynamic code scanning tools such as: Hpe now, MicroFocus Fortify, HPe WebInspect Enterprise and Sonatype iq Server to perform security assessments.

• Led groups (1-20) of test engineers over multiple projects that were responsible for conducting security assessments, vulnerability and quality testing using automated tools for online banking applications.
• Conducted testing and inspection for vulnerabilities and validated all customer security requirements were complete.
• Ensured security best practices were built into the SDLC process to include safe coding practices and testing.
• Analyzed requirements, performed risk analysis resulting in development of appropriately targeted automated test framework that limited project risk exposure and complied with current OWASP and latest Common.
• Developed, implemented and maintained security test plans, test cases, automation scripts, reports, and procedures.

• Responsible for testing coordination and deployment of security patches, custom branding for individual customers, fix packs and full versions of shipping software products.
• Responsible for development and oversight of automated software regression scripts developed by in-house and contracted staff for Self Service Password Reset and Single Sign On products.
• Developed quality assurance policies ensuring reliable, well-documented, software that met pre-defined requirements in each stage of development.

• Develop test applications and tools for compiler/translator using C#, VB, Perl, and Ruby
• C# Software Development for mobile applications cross device compiler.
• Performed software development activities for automated regression scripts using VB, C# and C++.
• While working remotely, set up complete QA lab with several network configurations to test device provisioning, synchronization and software releases
• SQL database and device database synchronization testing performed working with AppForge and Intellisync developers to resolve issues

• Software test engineer / developer, testing virus, anti-malware, malformed mime detection, capture and heuristics on multiple enterprise software products and appliances.
• Developed test labs for verification of product performance related to content scanning, intrusion prevention systems, AV for SMTP.
• Performed software development and bug fixes using Java, JavaScript, C#, C, C++ cross platform, windows, Linux, Solaris.
• Performed software development activities for automated regression scripts using Java and C++.