William Getz Email & Phone Number

United States

NodeJS, Angular, AWS

Chicago, Illinois, Us

• Authored a JavaScript tool to audit GitHub dependency graph for Open Source Software dependencies.• Collaborated with dev teams to help identify potential remediation options for pen-test findings.• Developed remediation timelines which are reasonable for workflow while following NIST recommendations with principal engineers.• Co-authored security investigation and incident response policies.• Identified ingestion sources and alert notification channels with Security Information and Event Management (SIEM) tool provider.• Identified alert investigation chain of responsibility with Managed Security Service Provider (MSSP) for SIEM tool alerts.• Investigate alerts to determine if a full security investigation is required.• Coordinated investigations with security and IT/Software teams.• Contributed to policy and practice documents for state regulator audit.

West Des Moines, Iowa, Us

• Authored the Puma Scan Professional Edition SAST tool as a Visual Studio Code extension.• Audited and reported software vulnerabilities discovered during application and cloud environment security assessments.• Developed Angular, React and Javascript vulnerability discovery rules for the various editions of the Puma Scan Professional Edition SAST tool.• Interfaced with the Sonatype OSS Index in order to implement component analysis in the Puma Scan Professional Edition SAST tool.• Integrated the Puma Scan’s vulnerability rule documentation with Secure Code Warrior training materials and interactive labs.• Consulted with domestic and international clients to aid in onboarding systems into AWS GovCloud.• Contributed to building GovCloud environments by infrastructure as code using HashiCorp’s Terraform and AWS’s CloudFormation software tools.• Migrated existing on premise deployment pipelines into AWS CodeDeploy pipeline.• Consulted client’s development teams on security best practices.

San Francisco, California, Us

Help app teams succeed in security through mutual collaboration and education. Provide guidance to app teams on Secure SDLC practices. Use knowledge of application security to help app teams find and fix security bugs. Assist app teams identify real and false positive findings in SAST and DAST scan results. Collaborative training in Enterprise Application Secure Practices with app teams. App team liaison to the application security group

San Marcos, California, Us

Security Took the lead on application security in the department Headed communication between our team and the security auditors Introduced threat modelling concepts to team Worked with my team to include a "security check" requirement to features and bug fixes Worked with my team to develop ACL tests with no dependency on AWS Provided in-house hands' on training about web vulnerabilities using OWASP Juice Shop (http://bkimminich.github.io/juice-shop/#/) Hosted an "Elevation of Privilege" card game at Agile Open North West 2018 and at work to help teach threat modelling NodeJS Developing an AngularJS application to allow customers control of their irrigation from their phone or desktop. Uses AWS technologies including IOT Implemented unit and automated acceptance tests Automated project configuration of new computers to run our application Uses AWS Secrets Manager and Windows Credential Manager to manage access to repos Wrote application to visualize a kind of application "heartbeat" chart from our repos.NET Wrote a C# tool to query LDAP in order to ensure our team members have appropriate permissions for work Feature work on existing ASP.NET MVC applications Created and source controlled database migration scripts and schema changes Refactored a VB legacy application in charge of specialized contractor work to extend functionality and grow market share Helped create a module to capture of commands and ensure encoding/decoding works Helped to introduce a self-hosted ASP.NET MVC application to implement new functionality in legacy VB app and reduce dependency on winformsDevOps Helped create CI environments for .NET, NodeJS, and mobile applications Manage access control of git projects

San Diego, Ca, Us

Orchestrating and executing the maintenance of legacy data visualization web applications, VBA applications, and SQL Queries. Bringing industry best practices to the team, and training team members in those practices. Bridging the gap between IT and the division to help facilitate the needs of the team while aligning with IT.Worked closely with IT to provision the necessary VM for Tableau Server. Installed Tableau Server and RServe to be used for Data Analysis and Investigations● Using postgress and powershell, set up a monitoring service to notify specific users when a Tableau Dashboard Extract fails to refresh.● Applied company branding by discovering how Tableau Server served up its pages and modified the CSS files accordingly.● Installed RServe and integrated it with Tableau Server.Worked closely with the division manager on the first steps needed for coming into compliance with industry best practicesSource controlled web applications which had never been source controlled before. Extending source control to VBA modules as they are modified and source controlling Stored Procedures as they are modifiedInvestigating and fixing failing SQL Jobs, scheduled tasks, web pages and VBA macro files.Providing guidance on software architecture, clean code, and defensive programming to team mates who have little experience developing software and who primarily work in R.

Boston, Ma, Us

Develop N-tier windows and web based applications using C#, VB.NET, ASP.NET, ASP.NET MVC (MVC), Entity Framework (EF), Language-Integrated Query (LINQ), Javascript, jQuery, SSMS, TSQL, and various unit testing strategies• Automated document generation process that combined content from a word document and a possibly non-OCR’d PDF using C#, OpenOffice XML, Tesseract, EF, LINQ, SSMS and TSQL• Automated document generation process that combined selected lists, and some file metadata, from multiple documents into one document using C#, OpenOffice XML, EF LINQ, SSMS and TSQL• Helped create and am currently maintaining a web based contact aggregator for the various taxonomies using MVC, C#, jQuery, knockout.js, select2.js, AJAX, JSON, Entity Framework, LINQ, SSMS and TSQL o Implemented gamification by integrating with Gigya Gamifaction. o Created service that imports daily actions from Gigya to allow for tracking• Extended the functionality on an existing image clipping tool written in VB.NET, C# for the new data access layer, EF, LINQ, SSMS and TSQL• Replaced hard coded SQL queries when in scope• Designed and developing a document processing and manipulation website which converts two column table content in word to an excel workbook using MVC, C#, Javascript, jQuery, Telerik Upload Control, OpenOffice XML, EPPlus, and LINQ• Team member on a web form survey rebuild controlling the document generation from templates using C#, ASP.NET Forms, Javascript, jQuery, knockout.js, AJAX, OpenOffice XML, EPPlus o EF, LINQ, SSMS and TSQL• Created several webservices for use in error logging and third party api calls using C#, ASP.NET WebAPI 2, EF, LINQ, SSMS and TSQL• Extended VSTO application integrating with Elite ProLaw for some of its document generation using VBA, VB.NET and LINQ• Created new VSTO application which extracts, formats, and integrates user defined text from the database for legal use using C#, Word Interop, EF, LINQ, SSMS and TSQL

Atlanta, Ga, Us

Developed, remediated, and maintained N-tier windows and web applications using C#, VB.NET, Entity Framework (EF), ASP.NET MVC (MVC), Windows Installer Xml (WiX), Javascript, jQuery, SSMS, TSQL, and various unit testing strategies• Member of a team in charge of remediating and improving an entire document ingestion and processing application using VB.NET, C#, EF, LINQ, WIX, SSMS and TSQL• Developed and supported internal websites using MVC, C#, Javascript, jQuery, EF, LINQ, SSMS and TSQL

Began as a carpenter apprentice and ended as a foreman