* Developing tools to enable teams to find issues during development and in CI/CD and supporting teams working hands on with them * Researching and learn new security best practices, in order to evaluate adoption * Using open source tools (e.g. OWASP, pentesting, dependency checking, etc.) and practices (e.g. threat modelling) to ensure software meets security standards * Participate in shaping a secure architecture through the whole software development life cycle * Helping shape processes and guidelines for secure code development and work with other teams for all the mentioned purposes * Extending microservice landscape and will focus on domain logic, persistence, service to service communication as well as security to allow for performant and scalable software architecture * Writing automated tests with Static and Dynamic analysis upon security perspective

Web application security assessments- Leading of product management team- SSDLC and Threat Modelling, contributing Software Development Team- Hands on securing Azure resources and virtual networks based on Zero-Trust approach.- Hands on DDoS mitigation, WAF policy/rule optimisation and monitoring- Research and solution providing for regulation/standard compliance for both developedproducts and internal ISMS process- Project Management for the development and implementation of penetration tests- Protective measures, safety improvements for corporate network and web application Show less

* Project: Social Media Platform * Two months training and development in Nanjing/China (Java Developer; Spring, Struts, iBatis, JSP, Velocity) * Requirement Analysis and Design (Functional Reqirement Specification and API Specification Preperation) * Transcoding Technologies, Client Side Application Development and Tests (local Java, SOAP, http) * Functional and Performance Test, Client Side Development (RESTful Web Service, LoadRunner Scripting) * Used Technologies, Platforms, Environments: J2EE, Eclipse, PLSQL, Glassfish, Jboss, Oracle, RHEL, SLES, Windows

Software Developer for Log Management System CryptoLOG, OSSIM Security Engineer

Leading Technical Support Team that provides technical meetings, Demos, PoC’s, trainings, maintenance, mail/call/ticket supports. 1000+ Enterprise, 3000+ End-user Local-Global Customers have been supported. Operations and Support Process Management for customers/partners of CRYPTTECH. Product development management for CRYPTOSIM(Security Information and Event Management), CRYPTOLOG (Log Management), UNITMON (Security Monitoring) and CRYPTOSPOT (Hotspot Management) softwares.

Managing of Product Development Team. Contribution and management of SIEM (Security Information and Event Management), Log Management System, Authentication Systems, Endpoint Security, DLP/NLP, Network Security, Regulation Compliance, Malware Analysis, APT (Zero Day) Attacks Detections, Vulnerability Scanners, Availability/Security Monitoring software or modules as an on premise products. Moreover Cloud Base Logging, Cloud Base Captive Portal and Cyber Threat Intelligence software as a service.Leading Security Team that realizes penetration tests, cyber security consultancy and security hardening for developed products.Technical Designing for newly developed modules or products. Prototype Testing with test team to collect quantitative, qualitative, and behavioral data while evaluating the user experience.Management of long-term projects (ISP, Government). Responsible for Technical Architectural Decisions, Opex/Capex calculations, Project Planning. Show less