WP Security and Development, Santa Clara, CA — Founder & WP Security Expert

September 2016 - PRESENT

Currently provide cybersecurity solutions and web development services for small businesses and organizations running WordPress.

• New site development tailored to specific business needs
  • HTML, CSS, Javascript site
  • WordPress site
  • Custom programmed and scripted HTML, CSS, Javascript, PHP, MySQL site

• Redesigns of existing websites to better match business goals

• Recovering hacked WordPress sites
• Vulnerability assessments with suggested mitigation solutions for each vulnerability
• Implementation of mitigation solutions such as, but not limited to:
  • SSL integration, firewall implementation, rule creation
  • WordPress backend and permission tweaks to disable insecure services as well as hide commonly known administration folder paths
  • Prevention of SQL injection due to bad field validation
• Ongoing cybersecurity and website maintenance

BAE Systems, San Jose, CA — Sr. Systems Engineer

February 2008 - PRESENT

Currently lead Cybersecurity activities by guiding the team through the Risk Management Framework (RMF) certification process.  I use system design skills to prepare vehicle platforms for RMF certification.

• Nominated for a Chairman’s Award in 2016 for pioneering this effort on the Amphibious Vehicle.
• Develop cross domain solution interfaces and integrate them
• Manage vulnerabilities and perform security control assessments, NIST control and policy assessments
• Manage services, ports, and protocols across the vehicle system
• Manage project planning, scheduling, cost accounts and earned value

Previously led Systems Engineering activities to provide modernization efforts on the Bradley Fighting Vehicle (BFV) Platform.

• Nominated for a Chairman’s Award in 2016 for providing insightful Concept of Operations training in the Situational Awareness and Communications Systems used in the military vehicle platforms - audience of more than 60 people across the country at multiple sites.
• Migrated 1553 interfaces to TCP/IP and CAN bus
• Led Systems Requirements effort that added and modified features of FBCB2 JCR and FOS SW (Situational Awareness/ Communications Systems)
• Demonstrated failure analysis and system assessment for FBCB2 and FOS SW interfaces on the BFV.  
  • Test case development to reproduce bugs in the lab that were seen in the field.  
  • Wireshark to record the data
  • Perl scripting to extract only the needed data for bug analysis
• Liaisoned to PM-FBCB2, PM-JBC-P and involved the other platforms weekly on the integration of FBCB2 JCR SW and JBC-P SW into the BFV product line.
• Collaborated with vendor to solve FBCB2/BFV, JBC-P/BFV and FOS/BFV TCP/IP interface issues.

Mentored Associate Systems Engineers on subjects ranging from career advice to technical assistance.

Podcast Co-Host / The DLRage Podcast