Guidewire Software

Principal Security Engineer

Finastra

Chief Security Architect

VMware

Staff Security Architect

Intercontinental Exchange

Tasked with assessing the overall security of the company’s applications which includes desktop applications, real time applications and web applications.  Enhanced processes across the various stages of the SDLC by involvement in requirement definitions, architecture, code reviews, security test case designs, language and framework assessment, and developer education.  

•	Work with architects to implement a secure application design
•	Contribute security requirements to requirements documentation
•	Contribute content to the yearly developer security awareness training
•	Contribute content to the Application Developer Security Policy (ADSP)
•	Perform manual code reviews 
•	Uses Checkmark to run static code analysis on applications looking for vulnerabilities
•	Uses NTO and WhiteHat Sentinel to perform dynamic security scans of applications looking for vulnerabilities
•	Review vulnerabilities with developers and suggest fixes
•	Created a newsletter aimed at developers as one of many forms of security education.  The newsletter highlights what is going on within the application security team, discusses recent security events in the news and uses these events as a learning tool to explain different security concepts.
•	Created the Application Security Advisory Committee (ASAC) to engage with the development teams on a more formal level to get their input on application security initiatives
•	Identify security tools that will help identify and prevent vulnerabilities in our applications

Senior Information Security Engineer

Boeing

In my current time at Boeing I have worked on 4 programs: Future Combat Systems (FCS) System of Systems Common Operating Environment (SOSCOE), Space Launch Systems (SLS), Ground-based Midcourse Defense (GMD) and Integrated Air and Missile Defense Battle Command System (IBCS). I have been fortunate that these four programs have allowed me to gain experience in all parts of the software development life cycle. I have developed code in Java, C, C++ and C#. I have been involved in the rapid prototyping of tools that were used by the customer support team to analyze the behavior and performance of SOSCOE as well as tools that were used to assist the customer in using SOSCOE.  I also have extensive Information Assurance experience writing secure code, analyzing security requirements, implementing code using the OpenSSL API, hardening hardware and software per business best practices, and installing and configuring security products such as McAfee ePolicy Orchestrator and McAfee's HIPS product.

Software Engineer

LexisNexis

Software Engineer Co-op

As a product security architect, I have over 10 years of experience helping to secure mobile, on-prem, and cloud applications.  In addition to my 10 years of security experience I have another 10 years of software engineering experience where I developed applications in Java, C++, and C#.

I take an empathetic approach when working with architects, developers, testers, and product management to implement a secure application design, contribute security requirements, perform code reviews, and provide security awareness training. I also leverage my expertise in SAST, DAST, SCA, threat modeling, security architecture, and vulnerability assessments to identify and mitigate risks.

I have experience implementing policy and processes in the security development lifecycle and setting up and running a bug bounty program.

Taplio

Thomas Bertling's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Thomas Bertling's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Thomas Bertling's Linkedin Analytics