
May 2022 - Current
Senior Staff Security Architect/Engineer
VMware by Broadcom - Remote
Saved the organization $200,000 annually by overseeing the development, implementation, and use of a custom in-house vulnerability management solution, created from a combination of open-source and proprietary tools.
Saved VMware $800,000 annually in personnel costs by fully automating the vulnerability assessment process for Tanzu Kubernetes Grid. Integrated the vulnerability management solution with Jenkins and Jira to automatically scan each Tanzu Kubernetes Grid build then create and assign tickets for discovered vulnerabilities.
Configured the vulnerability management solution to read the in-house vulnerability database and update Jira tickets based on triage and status information from the database.
Conducted 16 compliance assessments of the Tanzu Kubernetes Grid solution, designed remediation strategies, and provided ongoing guidance and instruction throughout the remediation process.
Developed, implemented, and documented the process for assessing, reporting, triaging, and remediating vulnerabilities, used by over 30 teams.
Created impact statements and mitigation strategies for each vulnerability, shared these with customers to address reported issues, and worked closely with customer success teams to ensure timely resolution of security concerns.
Wrote extensive technical documentation around the design of the TKGm security assessment process and triage process.