Lead key security initiatives, including:• Incident Detection and Incident Response• Cloud Security• Identity and Access Management• Secure Development Lifecycle• Awareness training• Infrastructure standardization and configuration management

• Lead Secure Development Lifecycle (SDL) program, focusing on building security in at every step of the process• Worked closely with DevOps teams to design and deploy a secure development pipeline using various orchestration tools and gates, including Jenkins (Cloudbees), Checkmarx, OWASP DependencyCheck, ZAP, and other tools• Deployed and maintained static code analysis solution (Checkmarx)• Conducted secure architecture analysis and threat modeling sessions• Designed and implemented SDL role-based training curriculum for development teams, targeting roles such as: developers, architects, qa, and managers• Worked closely with development teams to implement secure development requirements tailored to each application's operating environment, adhering to secure development standards and best practices• Deployed, maintained, and automated vulnerability management platform• Conducted 3rd party integration assessments• Worked closely with cloud and product security teams to understand and remediate common security vulnerabilities• Helped build a culture of security by orchestrating and presenting in brownbag sessions, lunch-and-learns, security awareness events, etc• Actively participated on Autodesk Red Team• Coached and provided support to junior members of the team

• POC’d, deployed, and administered FireEye Advanced Malware Detection (NX) and MalwareAnalysis (AX) appliances enterprise-wide in 10 key locations around the world• Supported POC and rollout of endpoint protection tools Bit9/CarbonBlack• Designed and contributed to threat intelligence initiatives• Deployed and supported Microsoft EMET zero-day protection on 10,000+ endpoints• Created Splunk dashboards & alerting mechanisms for integration with internal ticketing systems (ServiceNow)• Deployed Splunk Enterprise Security (ES)• Served as level 3 information security point of contact for escalation of security issues• Supported SDL operations by conducting threat modeling for products and services• Worked closely with security engineers and program managers to develop Security Metrics and Key Performance Indicators

As a Master of Information Management and Systems (MIMS) student I explored information security and privacy, data-driven decision making, data science and analytics, information management, user experience, and interaction design.

As an information security intern at Autodesk I was involved in one main project and several smaller projects. In the main project I designed and implemented a malware analysis tool using Python, MongoDB, and Bottle.I also worked closely with security engineers and program managers to improve security team's Metrics and Key Performance Indicators.Roles:• Behavior and heuristic analysis• Web application assessment• Vendor risk assessment• Incident process and investigationTools:• Python• MongoDB• Bottle

• Administered anti-virus/malware infrastructure.• Drove design and development of software roll-outs and upgrades (14 offices). • Developed automated scripts to resolve reoccurring software issues across the company.• Supported 4 production servers and networking devices (VMWare, Cisco, Sonicwall).• Provided help desk support for 200+ users.• Responsible for planning, logistics, and implementation of new office locations.

• Led IT operations and infrastructure for the United States and South Africa (10 offices).• Successfully redesigned major telecommunications contracts and outsourcing agreements, saving the company 40% in telecommunications spending and retaining the largest contract under more favorable terms.• Worked closely with CEO, CFO, and the Board to improve IT infrastructure and viability.

• Successfully managed technology infrastructure of an architectural design firm• Effectively worked with a team of senior designers to develop innovative techniques to stay ahead of competition• Doubled productivity of the design team by introducing custom rendering farms• Successfully implemented an email filtering system decreasing SPAM by 99%• Researched and analyzed competitors’ IT infrastructure making recommendations to the Executive Team• Developed and provided technology related training to employees

• Managed Information Technology Department in 12 countries (15 offices) • Designed disaster recovery plans; worked closely with disaster response teams to provide technical assistance and support in emergency situations• Provided emergency technical assistance to Kaiser Permanente doctors during disaster response deployments

• Planning, logistics, and implementation of small businesses• Procurement of hardware and software based on business need• Network Design• Building/Optimizing systems for maximum performance and reliability• Wired and Wireless security• Vendor contract negotiation