Yu Peng Email & Phone Number

Atlanta, Ga, Us

Atlanta, Ga, Us

- Expanded the automation team from 3 members to 7 and fully trained new employees to be efficient contributors.- Started and built a very successful off-shore team to increase our global presence and support other information security groups with 24-hour coverage. - Created a highly efficient program for weekly project delivery based on the agile development life cycle. - Restructured and prioritized our backlog to reduce risk and increase efficiency. Led the team to close hundreds of development requests for the past year.- Fully automated the workflow to receive requests, prioritize requests, notify users, and deliver project metrics.- Started and created an automation confluence page to document existing code base and new projects.- Reduced the new hire onboarding process from one month to one week, and the new member can finish setting up their environment and start learning and contributing by their second week after joining.- Built a resistant program with documentation and training so the team could function well in anyone's absence.- Transformed the automation team with a new process that turns engineers' time and effort into meaningful, measurable data with a story point schema.- Mentored team members for continuous learning and helped them develop different skills to advance in their careers.

- Lead the PoC and installation of enterprise security solutions. - Design and integrate automated DAST, SAST and Source Clear scans into SDLC pipeline. - Perform penetration tests in all applications before their deployments. - Manage bug bounty programs. - Train developers and QA in security. - Help developers to fix and to remediate security vulnerabilities. - Identify and mitigate potential threats with threat modeling.- Work with stakeholders to design secure applications. - Research zero day vulnerabilities. - Perform security investigations with incident response team. - Work with security team to create intrusion detection models base on application logs. - Modify sections of Application Development Security Policy base on new requirements. - Developed a process for managing enterprise application logging standards. - Developed a scanner to scan for new CVEs and zero day security vulnerabilities.

- Developed a real-time network perimeter protection tool that blocks thousands of malicious IP addresses everyday base on hundreds of analytic models generated automatically with IP intelligence data and internal activities logs. It was presented at FS-ISAC, 2019 in Washington D.C.- Develop real-time analytics tools to display trending intelligence topics and high risk IOCs with machine learning algorithms, Kafka, ELK stack and Splunk.- Develop tools to enrich Kafka streams with threat intelligence feeds and internal logs for real-time visualization, alerting and blocking. - Set up and maintain 3rd-party security tools including Varonis, Vectra, Anomali and Talend.- Design and maintain security data flow from network endpoints through aggregation, retention, parsing, SIEM correlation and datalake mining- Identify and implement tools to baseline activity and alert or limit suspicious activity and insider threat among networks, databases, data and users- Maintain commercial and open source wired and wireless infrastructure, tweaking rules to limit false positives and keep up with new threats while producing actionable data. Designs and manages Web Application Firewall (WAF) logic and rulesets.- Design and adjust egress content filtering, and advanced network and endpoint-based malware prevention and detection controls- build custom tools to automate SOC triage and response activities to combat phishing, lateral movement, system monitoring, and security workflow.- Identify new solutions and enhances existing open source and bespoke visualization toolsets to identify trends, compress event triage, understand data flows, identify anomalies, and automate reporting and analysis.

- Security Analytics - Designs and maintains security data flow from network endpoints through aggregation, retention, parsing, SIEM correlation and datalake mining- Behavioral Analysis - Identifies and implements tools to baseline activity and alert or limit suspicious activity and insider threat among networks, databases, data and users- Intrusion Detection and Prevention - Maintains commercial and open source wired and wireless infrastructure, tweaking rules to limit false positives and keep up with new threats while producing actionable data. Designs and manages Web Application Firewall (WAF) logic and rulesets.- Content Filtering and Advanced Threat Protection – Designs and adjusts egress content filtering, and advanced network and endpoint-based malware prevention and detection controls- Software Engineering - builds custom tools to automate SOC triage and response activities to combat phishing, lateral movement, system monitoring, and security workflow.- Visualization - Identifies new solutions and enhances existing open source and bespoke visualization toolsets to identify trends, compress event triage, understand data flows, identify anomalies, and automate reporting and analysis.

Cambridge, Ma, Us

Software Developer- Developing android applications

New York, Ny, Us

-Software Developer. Develop and support MediaView web platform.

Cambridge, Ma, Us

Developed a flow control system for a pressure pump.Developed an android application that collects and presents user health data through google map.

Kista, Stockholm, Se

-Software Developer. Developed a Network Topology Builder for users to create, save and export virtual network templates through a 'drag and drop'​ web interface. The 'End to End Automation' will give the user ability to launch actual virtual routers within the company network. -Software Developer. Developed a dashboard to present KPI data for users to track daily/weekly/monthly testing results and usage data in a much easier way. (JavaScript, HTML, MySQL and Perl)-Software Developer. Developed a Network Monitoring Application to monitor the Network Traffic through IPFIX.

Montréal, Québec, Ca

- Application Developer. Enhanced several existing applications to meet new requirements. Developed a Sealed Bid Auction Site for company employees to bid on old company equipment.

Tampa, Florida, Us

- Database Analyst. Developed and normalized database. Transferred data between existing database.- Application Developer. Developed a Network Monitoring Application to track daily routing changes. Developed several small applications to present data from Web API. Enhanced existing applications to meet new requirements.

Master'S Degree, Computer Science

Bachelor'S Degree, Computer Science