Security Automation Developer Resume
Cupertino, CA
SUMMARY
- Experienced Software Engineer wif strong programming, Networking, Network and Application Security experience in start - ups and high-technology companies. Skilled in implementing software methodologies and processes for iterative and rapid development and delivery.
- Excellent presenter of technical findings to a non-technical team. Ability to maintain productivity across multiple simultaneous projects and work streams. Self-motivated, responsible, and reliable team player wif excellent written and verbal communication skills
TECHNICAL SKILLS
Languages: Core Java, Multithreading, Algorithms, concurrency, Java 8, Python, bash
Web Framework: Spring Framework, Django, Flask
Infrastructure as Code: docker, chef, ansible
Databases: MySQL, MongoDB, Cassandra, Hibernate
Tools: Maven, Ant, GIT, Jenkins, log4j, JIRA
Security: Cryptography, AAA, JCE, PKI, X509, OpenSSL, SSL/TLS, SAML, Firewall, VPN, ACL, SASL
OS and Tools: Linux (RHEL, Fedora, Ubuntu, SLES), VMware, KVM, Windows Server 2008 / 2012
SDLC: Waterfall, Agile, RUP
Design Patterns: Singleton, Factory, Prototype, Builder, Iterative, Decorator Pattern, Proxy Pattern, MVC
PROFESSIONAL EXPERIENCE
Security Automation Developer
Confidential, Cupertino, CA
Responsibilities:
- Developed a full stack solution for large ACL data visualization (d3.js +Java+ Spring REST+ AJAX).
- Integrated Apple’s Kerberos Auth Framework on teh WSGI middleware for a Flask based web application
- Developed REST API endpoints for retrieving user info from a central Identity management Servers for application Access control in Django Rest Framework
- Implemented a Java client for a toolbox for proactive detection of security vulnerabilities and notification designed a full stack solution dat allowed teh aggregation of app host scans in a scheduled manner in teh backend and display results in a UI developed entirely in Typescript
- Led teh integration of chef-Automate for compliance integration on teh migration to microservice architecture which uses Nomad and Docker containers implemented a reporting tool in python dat allowed teh security team to consolidate host lists from several sources and returning a single consolidated list
- Implemented a pull request approval webhook, using TypeScript, to be used by managers on GitHub, deployed teh applications on internal cloud (Orchard) contributed to development of a compliance toolbox by implementing different classes for gathering information about internal users, verifying if access is required for different directory groups
- Implemented a Java solution to expose PKCS#11 interface from Hardware Security Module (SafeNet) to an artifact signing server for Confidential Server Team
Technologies used include: Python, Java, Django, Memcached, Redis, Splunk, REST API, Django Rest Framework, maven, GIT, JavaScript, Ruby, NodeJS, TypeScript
Security Consultant
Confidential
Responsibilities:
- Developed services to run on private PKI Certificate Authority servers for hardware and software signing. Improved performance of CA servers and automated X.509 Certificate issuance process. Increased availability of CA servers by integrating clustering and high availability solutions. Implemented features for periodical publishing of revocation lists
- Delivered data analytics and reporting application for a PKI solution. Implemented correlation and analysis features to support network security operations.
- Contributed to security design and implementation phases of Wi-Fi calling solution for Confidential clients. Developed client test tool to perform enrollment over web service calls. Profiled MySQL queries to optimize load on enrollment servers. Improved scalability of CA servers.
Technologies used include: Java, Python, Hadoop, JBoss, Clustering, MySQL, MongoDB, MariaDB, KVM, DRBD, Linux, SVN, Log4j, Jira, Jenkins, Vim, Ant, SOAP
