Tim D. Email & Phone Number

Remote

Performed multiple security roles by protecting the public's PHI while working on one of the leading government medical records systems. Embedded with multiple teams to act as a Security Lead for AppSec and DevSecOps duties including but not limited to: Secure Code Review, SAST/DAST/SCA, Penetration Testing, Threat Modeling, Secure Pipeline Automation.

Remote

Transitioning from an Application Security Champion, now to focusing on Security Automation within Wells Fargo. My core focus is on automating the Application Security practices within Wells Fargo, and building them into the DevSecOps pipelines. This as well as bringing experience and guidance to the Security Program as a whole and leading the Software.

Remote

I was brought onto the Wells Fargo team to aide in their deployment of their Application Security Champion program. This involved the deployment of AppSec security policies across a large group of applications exceeding 150+, and grew to include over 500+. This involved working directly with the application engineers and owners to make SAST a standard.

Chantilly, Virginia

• I joined the PenFed team to bring my development and security backgrounds together and pioneer their Application Security program. In addition to leading the AppSec team, I continue to use my knowledge and experience.
• Developed and Implemented automated static and dynamic application testing tools and procedures to make application security testing a standard process.
• Developed secure baselines for multiple systems and applications that were lacking.
• Trained teammates on introductory and advanced application security best practices and methodologies.

Chantilly, VA

• Everything from developing security policy, policy enforcement and review, to penetration testing, mobile application development and reverse engineering. Whatever it takes to ensure client's data is protected from.
• Conducted on-site information security policy testing and interviews for many of a major international pharmaceutical / health care corporation’s business partners. This testing is to ensure the business partners.
• Conducted information security policy compliance reviews on software and utility packages for a major international pharmaceutical / health care corporation.
• Created a custom middleware programming interface for interacting with cryptographic devices (SafeNet iKey) and a virtual private networking (VPN) client.
• Supporting the design and implementation of a SharePoint deployment for a major international pharmaceutical corporation, with a focus on maintaining compliance with HIPAA and internal information security policies.
• Perform mobile application vulnerability testing and ethical hacking for enterprise level applications which handle access to business critical information.

Honolulu, HI

Spearheaded the migration from.NET 1.1 into.NET 2.0 as well as SQL Server 2000 to SQL Server 2005. Assisted in extensive SQL queries for massive reporting purposes. Created helper scripts for the QA department to use for better testing. General coding bug fixes.

Honolulu, HI

Digital Mediums acquired Hirez Networks and that main software was frozen. From there I transferred my knowledge to developing websites, and interactive media for websites, trade shows, and kiosks (think of interactive shopping center maps, trade show kiosks or games). I implemented core application structures to template future work as well as direct.

Honolulu, HI

Updated the main point-of-sale application for each customized revision based on customer needs. Created new modules working in C# and MS SQL. Worked directly with customers to gather user requirements and implemented those into the software. Created custom reports with Crystal Reports as well as lead new hires with code discovery sessions.

Master Of Computer Science, Computer Science

Bs, Information Technology