Tim Bach Email & Phone Number

San Mateo, California, Us

* Grew team from a single founding engineer to 80+ person org handling all security and product engineering functions. Managed senior architect-level ICs, engineering managers, directors, and VPs.* Scaled the AppOmni security platform to support Fortune 10-size customers – tens of thousands of connected services with hundreds of millions of SaaS identities and billions of events per day.* Built and owned application security and SSDLC functions for full-stack engineering teams.* Led research and engineering to build industry-leading automated security analysis and monitoring capabilities for large SaaS platforms (Microsoft365, Salesforce, ServiceNow, Workday, GitHub, etc.).* Instituted technology and operational requirements and processes to attain compliance certifications, including SOC2 Types 1 and 2, in collaboration with other departments’ leadership* Attained FedRAMP “In Process” designation for the AppOmni platform in collaboration with other internal teams and external experts + auditors* Reported directly to C-level leadership and presented quarterly to the Board of Directors.

San Mateo, California, Us

San Mateo, California, Us

* Designed and implemented ETL, evaluation engine, and management layer for the industry’s first SaaS Security Posture Management (SSPM) platform, capable of continuously evaluating millions of possible permutations of security-relevant configurations.* Developed security recommendations engine and baseline security requirements recommendations for major SaaS applications, enabling SaaS Security expertise to be productized and delivered widely.* Led design and development from MVP to an extensible security platform monitoring all enterprise SaaS apps across security domains – data access, security posture, and ongoing real-time threat detection.* Designed and developed end user-controlled metadata and data ingest standard, allowing users to define SaaS Security Posture support for internal and on-prem services.

Cupertino, California, Us

IS&S Security Engineering

San Francisco, California, Us

Managed a team of product security engineers, providing security coverage for several major Salesforce products and business units. Provided guidance for product security coverage and worked with product teams to ensure Salesforce products were secure from design through release.In addition to product coverage, other major projects included:- Built out Security Engineering function, focusing on Product Security automation and other projects with the goal of creating security force multipliers for the team and company.- Worked with other product security leaders and the broader Salesforce Security organization to redesign and improve the secure development lifecycle at Salesforce. This included agile SDL intake, threat modeling, and long-term code coverage and ownership models.- Product Security management and support for the Salesforce Open Source Software initiative.

San Francisco, California, Us

Design, prototype, and develop internal and customer-facing security automation and tooling to act as Product Security force multipliers. Automate and accelerate the penetration testing process, detection of security problems, and proactive mitigation of security threats.Audit and conduct penetration tests against software partners prior to AppExchange listings. After these assessments, deliver comprehensive security reports and suggested remediation steps and discuss with partners.In conjunction with the Salesforce World Tour and Dreamforce, meet with global groups of developers, partners, and customers to discuss and provide education about security features, resources, and secure development practices on the Salesforce Platform.