Summary

Software engineer with more than 10 years experience securing, designing, building, and managing the implementation of web applications in ColdFusion, SQL, CSS, AJAX, and JavaScript. Specialized in Web Application vulnerability assessments and secure coding. Ability to work in a highly versatile, responsive environment analytical and detail oriented, strong team leadership, independent thinker, client-focused and proactive team player.

EXPERIENCE:

Web Developer

Confidential

• Developing organization-wide secure coding practices policy, ensuring compliance with best security practices eg. OWASP Top 10.
• Serving as primary checkpoint for evaluating application code for security compliance and led all resulting remediation efforts.
• Remediated over 30 web security incidents in 1.5 years, increasing the security of organization's corporate website.
• Managing relationships with web security tool vendors and evaluated multiple application vulnerability scanning tools to determine the best fit for the organization.
• Member of Technical Security Incident Handling Team, a cross-functional task force that prepares to respond to security incidents in the organization.
• Significantly improved organization's web application firewall WAF through focused evaluation and tuning.
• Leading production support operations for group of 5 developers. Primary point of customers contact for support tickets, delegated assignments, managed release and deployment coordination.
• Managed the development and implementation of a custom, multi-location conference rooms' reservation application, significantly reducing administrative overhead. Reengineered application to support the organization's relocation to new headquarters, with no business disruption or production defects.
• Primary development resource on numerous enterprise-wide application development projects, including:
• Enterprise search databases, utilizing Google maps and Google Search Appliance
• Report management tools
• Content management system for organization's publishing division
• Corporate calendar
• Database and websites migration from MySQL 4 to MySQL 5
• Migration of corporate ColdFusion and PHP websites to a new infrastructure.
• Managed implementation of ExactTarget email marketing database, which increased organization and marketing potential for Sales department.
• Mastered numerous front-end and back end development frameworks including Model-Glue,
• ColdSpring, Gliint, and ValidateThis.
• Designed and developed new features and products, including requirements gathering, estimating, coding, testing, developing test plans and maintenance schedules using SDLC process in ITIL environment.

Associate Web Developer

Confidential

• Design Assistant Confidential Created, implemented, and updated address database for illustrators.
• Web Developer/Tech Lead Confidential Programming for multiple web, wireless, kiosk and intranet projects.
• Web Developer freelance project Confidential Implementation, design and development of intranet portal for a major technology firm.
• Web Developer freelance project Confidential Implementation and design of hotel's website and creation and generation of tracking reports.
• Worked closely with senior members of the team to make strategic decisions on continuous improvement of web applications.
• Supported all enterprise web applications using ColdFusion, JavaScript, and MySQL.
• Generated statistical reports of total page views and actual bookings, and revenue.
• Thorough involvement in design of the internal database.
• Contributed to making major decisions regarding business model.
• Proactively interacted with all team leaders, programmers, sitebuilders, and IT personnel at various stages of project life cycle ensuring all deliverables met deadlines.
• Deeply involved in all aspects of project information/systems architecture, web development and design for clients including: Bloomingdales.com, TrendReport.com, Eosk.com, FineStationery.com, Ghurka.com, Zegna.com plus many others.
• Designed, developed, and implemented internet/e-commerce application process flow and specific functionalities such as checkout, payment system administration, and back-end administrative tools.
• Assisted in building and maintaining databases.
• Drafted functional and technical specifications based on the clients' business goals.
• Designed book interiors inputted all type/design corrections for book covers.
• Tracked, trafficked, and logged in mechanicals, digitals, match prints, and press proofs for art department.
• Trained new design assistants in using various software and accomplishing assigned tasks.

Professional Tutor

Confidential

• Conducted seminars all aspects of Visual Basic, Access, and HTML to student populace.
• Merchandise Assistant Confidential Developed and maintained a detailed computer inventory tracking system.
• Investigated and coordinated new vendor lines and reviewed products for inclusion in merchandise assortment.
• Worked closely with the Vice President of Merchandising.

TECHNICAL SKILLS:

• Penetration Testing Tools: Burp Suite, Wireshark, QualysGuard, WhiteHat, Metasploit, Samurai Testing Framework
• Programming: ColdFusion, HTML, CSS, PHP, JavaScript, XML, AJAX, SQL, JSP, Visual Basic, C , Perl, Visual FoxPro, Director/Lingo
• Database: MySQL 5, Oracle 11g, SQL Server, MS Access
• Operating Systems: Mac OSX, Windows, Linux, Ubuntu, Unix
• Other Tools: SVN, Fuseguard WAF , Mura CMS, CF Builder, TextMate, DreamWeaver, Sublime Text, Google Search Appliance, Visio, Excel, QuarkXpress