Over 15 years of experience that includes both Application/Information security engineering and web application development/architecture by way of adopting the latest techniques and time tested methods of keeping PAA (Publicly accessible applications), HRA (High Risk applications) and HDVA( High Dollar Value applications) secure. In those years, I provided oversight, mentored and managed developers', application owners in security training, with OWASP’s Top 10 principles as the epicenter of the secure development process in addition to building a risk profile for each of these applications using Microsoft’s Threat Modeling techniques. I have also leveraged various code scan tools including SD Elements, HP Fortify and Threadfix to perform SAST (static application security testing) for business critical web applications deployed in the Consumer Lending LOB for Wells Fargo. As an ongoing effort, partnering with various app teams to develop and implement a clear and concise security plan to perform a secure rollout of hundreds of web applications into the Microsoft’s Azure Private cloud environment. I am a highly analytical and results-oriented professional extremely adept at developing enterprise web applications, information/application security, software architecture, infrastructure management, Waterfall and Agile software methodologies, and database management. Some of my competencies are; - Information Security - OWASP -SANS 25 -Software Assurance Maturity Model(SAMM) - Application Security -Threat Modeling -Cloud Security - Communication and Routing Protocols - Enterprise Web Applications - Software Methodologies (Waterfall and Agile) - Database Management -Web Architecture and Development - Software Development - People Management - Resource Management Tools - Port Swigger Burp Suite -OWASP ZAP(Zed Attack Proxy) -SQL Mapper -nMap