Will R. Email & Phone Number

As an Application Security Engineer with over 5 years of specialized experience and 7 years in the cybersecurity field, I have honed a robust skill set focused on safeguarding applications from potential threats and vulnerabilities. My journey began with a solid foundation in networking and information security is where I developed an understanding the security landscape. This paved the way for my specialization in application security, where I have since dedicated myself to enhancing the security posture of web and mobile applications, and backend systems. My expertise encompasses conducting comprehensive vulnerability assessments, implementing OWASP Top 10 security standards, and integrating security practices within CI/CD pipelines to ensure a proactive defense mechanism is embedded throughout the development lifecycle. I am proficient in various programming languages and automation tools, which enables me to develop and deploy custom security solutions tailored to specific organizational needs. I thrive on collaboration and have a track record of working effectively with cross-functional teams to instill a culture of security awareness and best practices. Expertise in conducting comprehensive threat modeling for applications, identifying and addressing security risks with effective strategies. Proficient in performing detailed code reviews and employing Static Application Security Testing (SAST) tools to proactively identify vulnerabilities.Skilled in integrating Dynamic Application Security Testing (DAST) tools into CI/CD pipelines,leveraging Software Composition Analysis (SCA) to identify and mitigate risks in open-source components and third-party libraries, alongside the strategic use of Software Bill of Materials (SBOM) enhancing security testing processes using Jenkins and GitHub Actions.OWASP Top Ten and Vulnerability Management: Deep understanding of the OWASP Top Ten vulnerabilities, applying this knowledge to fortify applications against prevalent threats.I've been instrumental in fortifying our infrastructure across platforms like AWS and Azure. By crafting and enforcing Identity and Access Management policies, securing data through encryption, and deploying automated tools for security monitoring, I've proactively identified and mitigated threats, ensuring swift response times to potential security incidents.My commitment to continuous learning and staying abreast of the latest security trends and technologies drives my goal to innovate and elevate application security standards within the industry.