JPMorgan Chase & Co.

Multidisciplinary role leading enterprise SDLC security, in practice, at a global scale.

Executive Director, Cybersecurity & Technology Controls

Amazon Web Services

Founded and lead a specialized review team aimed at maturing the security posture of post-launch production services.

Responsible for: • Threat Modeling, Penetration Testing, and Design Review for high-profile products; • Development & Standardization of Security Review Program Methodologies; • Development of Threat Modeling Standards; • Development of Metrics & Reporting Capabilities; • Design & Development of Automated SAST/DAST Detection Capabilities;

Senior Security Engineer

Deja vu Security (Acquired by Accenture)

Lead teams in exploiting a wide array of technologies, including: • mobile Point of Sale systems, • physical access control systems (proximity card readers), • endpoint protection software, • 10/40G SFP networking devices, • software defined network systems, • blockchains & smart contracts, • image recognition systems, • machine learning platforms, and • over 100 enterprise web app/web svc environments & product development practices. Created training programs, tool-chains, and methodologies to grow and develop the professional services team.

Responsible for: • Penetration Testing & Client Ownership for high-profile clients; • Development & Standardization of Assessment Methodologies; • Development & Standardization of training program to enable team growth to approx. 22 technical staff;

Principal Security Consultant

Branched out to pursue professional growth, opportunities, and challenges. Working for myself and with friends we delivered a variety of projects, including: • Penetration testing of Automated Teller Machines (ATMs), • Penetration testing of large scale financial applications, • Incident response of a large scale consumer electronics organization, and • Offensive application security training.

Security Consultant

SecTheory

Acted as the only Security Engineer outside of founding staff, primarily engaged as a dedicated security resource for their largest client. Operated in an advisory capacity for a client organization of approx. 300, during that time the organization grew to approx. 700 people, acquired multiple companies, operated offices in 5 countries, 2 super bowl commercials (80 million connections in <30 sec), and some patents (US11023876B2). I developed internal security practices and established the internal security team to address the increasing scale of risk(s).

Also engaged in on-demand security services for other high-profile clients in multiple sectors including airlines & finance. Project scope ranged from application pentests to incident response and fraud analysis.

Responsible for: • Penetration testing of acquisitions; • SDLC integration of SAST/DAST solutions; • Operations of automated controls (WAFs/IDS/Scanning); • Training/Education of client staff (Security & Development); • Application security reviews & threat modeling; • Fraud analysis, prevention, & incident response;

Security Engineer

WhiteHat Security

Joined WhiteHat when the organization was approx. 30 people, as a member of the Sentinel services team.

Responsible for: • Web application penetration testing to cover gaps in automation. • Development of new detection capabilities. • Client ownership, communications, & project management. • Training/Education to grow the team from 3 to approx. 12.

No cold calls or solicitation please.

Hand crafting artisan bits to knock things over...

A proven leader w/ 18+ yrs operating and delivering in offensive & defensive information security roles for startups and global enterprise.

Red Team & Penetration Testing
Web & Web Connected Technologies
IoT & Embedded Devices
Full-Stack Cloud & Application Security
CI/CD & Secure Development Operations
Enterprise Security Automation & Tooling
GRC & Control Design

Comments & opinions are my own.

Taplio

Daniel H.'s Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Daniel H.'s Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Daniel H.'s Linkedin Analytics