Terence N. Email & Phone Number

Los Angeles Metropolitan Area

• Responsible for creating more agile and innovative IT environments across the agency. Provides vision, leadership and direction for managing technology operations (e.g., software development, telecommunications, data security systems). • Designs, develops, and implements resources and roadmaps, policies and procedures, and short- and long-range objectives.• Provides strategic and operational leadership for IT administration, infrastructure and security, fostering a culture of collaboration and innovation. • Managed multiple teams of Federal and Contracted staff 85+ with annual budget of 37M enabling the CIO to facilitate change and adeptly balance resources and priorities.• Designs, develops, and implements resources and roadmaps, policies and procedures, and short- and long-range objectives.• Experience with contract and vendor negotiations. Cancelled failing cloud migration project, built in house team 1.5M in contract cost, and 500k per year in annual extended support costs.• Consolidated multiple tiers of helpdesk into one saving 30% on helpdesk costs – this also improved relationships with previously dissatisfied customers like HR and Payroll, which led to increase in budget for IT.• Collaborates closely with multiple offices such as HR and Payroll, and several programs such as VISTA and NCCC - balancing multiple requests for software updates, delivered on time in within budget constraints. • Manages program risks through effective identification, mitigation, tracking, and reporting of risks.• Builds and cultivates positive, productive relationships with cross functional teams to help foster program participation and adoption.• Ensures all directly managed staff are familiar with best practices such as risk and system assessment and understanding the mappings between multiple frameworks such as NIST 800-53

Washington D.C. Metro Area

• Served as the Information System Security Officer (ISSO) and Data Warehouse Task order manager for AmeriCorps.• Supported the information assurance program and risk management framework within the IT portfolio of information systems.• Conducted risk and vulnerability assessments of planned and installed information systems.• Coordinated implementation of IT security programs across platforms while serving as an Information Assurance SME.• Developed IT vulnerability reporting criteria, managed a computer security incident response team (CSIRT) from discovery through concluding, including delivery of after-action reporting to executives.• Worked with system owners to certify and accredit systems while also monitoring and supporting closures of plans of actions and Milestones (POAM's).• Conducted risk and vulnerability assessments.• Worked with application developers, database administrators and system engineers to improve and maintain the security and privacy of systems.• Conducted security evaluations, audits and reviews of annual security controls on systems.• Participated in network and system design ensuring appropriate system security policies.• Performed activities relating to FISMA, Privacy Act, NIST security standards while supporting information systems security and accreditation activities.• Reviewed Nessus scans and provided reports on vulnerabilities and pathways to remediation.

Washington, Dc

• As a Senior Security Code Reviewer and Web Application Security tester, performed penetration testing and source code security reviews, configured and removed false positives, managed secure software development initiatives to mitigate vulnerabilities.• Gained experience with security tools like Burp Suite, OWASP ZAP, Fortify, CheckMarx, AppScan Nessus.• Conducted source code security reviews which involved both developed in-house and components of open source software stacks consisting of web mobile code, JAVA J2EE, database code, in an application inventory that included new and legacy systems with complex data flows.• Converted source code security reports into penetration test plans.• Performed or led performance of all web application security testing to evaluate complexity of exploitability, reconfigure scanners and planned and prioritized software development tasks to mitigate vulnerabilities.• Demonstrated experience utilizing static and dynamic code scanning tools such as: Hpe now, MicroFocus Fortify, HPe WebInspect Enterprise and Sonatype iq Server to perform security assessments.• Utilized strong working knowledge in writing and correcting coding mistakes for source code written in languages like Java, Ruby, C#, JavaScript, PHP, and Python• Delivered expertise in conducting code reviews for all code changes for a given application release, providing both a detailed risk analysis of the security posture of the code and technical programming solutions (secure coding standards) to the developers to mitigate insecure code from being implemented.• Utilized experience in organizing legacy code issues to facilitate upgrade and migration to newer systems.• Conducted market research to identify code analysis tools. • Identified false-positives with the scans, while documenting and reporting on overall quality of source code from a security perspective.• Developed a working knowledge of DevSecOps and development pipeline integration and automation.

• Led groups (1-20) of test engineers over multiple projects that were responsible for conducting security assessments, vulnerability and quality testing using automated tools for online banking applications.• Conducted testing and inspection for vulnerabilities and validated all customer security requirements were complete.• Ensured security best practices were built into the SDLC process to include safe coding practices and testing.• Analyzed requirements, performed risk analysis resulting in development of appropriately targeted automated test framework that limited project risk exposure and complied with current OWASP and latest Common Vulnerabilities and Exposures (CVE).• Developed, implemented and maintained security test plans, test cases, automation scripts, reports, and procedures.

• Responsible for testing coordination and deployment of security patches, custom branding for individual customers, fix packs and full versions of shipping software products.• Responsible for development and oversight of automated software regression scripts developed by in-house and contracted staff for Self Service Password Reset and Single Sign On products. • Developed quality assurance policies ensuring reliable, well-documented, software that met pre-defined requirements in each stage of development.

• Develop test applications and tools for compiler/translator using C#, VB, Perl, and Ruby • C# Software Development for mobile applications cross device compiler.• Performed software development activities for automated regression scripts using VB, C# and C++.• While working remotely, set up complete QA lab with several network configurations to test device provisioning, synchronization and software releases• SQL database and device database synchronization testing performed working with AppForge and Intellisync developers to resolve issues

• Software test engineer / developer, testing virus, anti-malware, malformed mime detection, capture and heuristics on multiple enterprise software products and appliances.• Developed test labs for verification of product performance related to content scanning, intrusion prevention systems, AV for SMTP.• Performed software development and bug fixes using Java, JavaScript, C#, C, C++ cross platform, windows, Linux, Solaris.• Performed software development activities for automated regression scripts using Java and C++.