"David is a highly skilled and dependable developer. His expertise in React and Next.js brought our project to life with clean code and a seamless user experience. He consistently delivers high-quality work on time and exceeds expectations."

“I had the pleasure of collaborating with David on several web development projects. His problem-solving mindset and strong understanding of modern frameworks like Next.js and Node.js make him an invaluable asset to any team.”

“David’s ability to blend design and functionality is remarkable. He ensures that every project not only performs flawlessly but also provides an engaging user experience. His professionalism and teamwork make him a joy to work with.”

Develop and deploy machine-learning pipelines while embedding access control, encryption, and secure configuration management. Collaborate with cybersecurity teams to automate model validation and ensure HIPAA and NIST compliance. Maintain secure data flow between AWS and GCP environments, enforcing identity and key-management best practices. Monitor ML applications using Splunk dashboards for anomaly detection and audit traceability. Conduct post-deployment reviews to identify potential model or API vulnerabilities.

Tools: Python, TensorFlow, AWS, GCP, Splunk, Docker, GitHub Actions

Strengthened pipeline integrity by integrating Snyk and Checkmarx scanning into GitHub Actions workflows. Automated ServiceNow ticketing through Slack integrations, improving vulnerability remediation timelines. Authored standardized AppSec guardrails and runbooks for development teams across multiple departments. Collaborated with cloud engineers to verify IAM policies and reduce misconfigurations in AWS accounts.

Tools: Snyk, Checkmarx, GitHub Actions, AWS, ServiceNow, Slack API

Performed web and API penetration testing to identify critical vulnerabilities before production release. Implemented automated code-scanning through Fortify and Checkmarx integrations within Jenkins pipelines. Delivered developer workshops on OWASP Top 10 and secure SDLC principles, lowering recurring flaws. Partnered with Agile teams to align sprint deliverables with corporate security baselines. Prepared technical reports and remediation guidance for leadership and compliance audits.

Tools: Fortify, Checkmarx, Jenkins, OWASP ZAP, Burp Suite

Led company-wide secure coding and AppSec awareness sessions, improving compliance metrics across teams. Designed and documented secure AWS architecture patterns, emphasizing IAM segmentation and network isolation. Reviewed and approved security documentation for DevOps projects to meet Fannie Mae requirements. Provided ongoing consultation to developers on vulnerability prioritization and mitigation.

Tools: AWS, IAM, CloudFormation, SonarQube, Jira

Built secure Azure DevOps pipelines embedding Checkmarx and Burp Suite scans for every deployment. Automated M365 and Azure AD log auditing to detect privilege escalation and unauthorized access. Developed PowerShell scripts for compliance reporting and user-access certification reviews. Drafted detailed documentation to standardize DevSecOps implementation across teams.

Tools: Azure DevOps, Checkmarx, Burp Suite, PowerShell, Azure AD

Conducted recurring penetration testing and vulnerability validation of internal applications. Performed threat modeling using STRIDE and IASRA frameworks to predict and mitigate application risks. Coordinated remediation plans with DevOps and QA teams to ensure patch completeness. Created dashboards to track open vulnerabilities and report risk posture to leadership. Contributed to audit evidence collection for SOC 2 and internal compliance reviews.

Tools: STRIDE, IASRA, Burp Suite, OWASP ZAP, Jira, Confluence

Defined secure SDLC guidelines across multiple client projects, ensuring consistent code security standards. Automated dependency scanning with WhiteSource and Python scripts, reducing manual review effort. Performed detailed code reviews and threat assessments in collaboration with engineering leads. Designed API security controls aligned with OWASP and CIS benchmarks.

Tools: WhiteSource, Python, OWASP, CIS Benchmarks, Git

Implemented Ansible and Terraform scripts for consistent provisioning and hardening of cloud resources. Created dashboards to visualize system vulnerabilities and configuration drift in real time. Deployed AES-based encryption to safeguard sensitive data during transmission and storage. Collaborated with infrastructure teams to ensure secure integration of DevOps tools.

Tools: Ansible, Terraform, AWS, AES Encryption, Grafana

Developed and maintained Java and Angular applications supporting internal compliance workflows. Built RESTful APIs integrated with AWS (EC2, S3, CloudFront) for secure data operations. Participated in vulnerability testing and implemented fixes based on AppSec recommendations. Assisted QA teams in building automation scripts for regression and security testing. Supported transition from on-premise servers to AWS cloud environments with data-protection controls.

Tools: Java, Angular, AWS EC2/S3, REST API, Selenium

Managed firewall rules, antivirus deployments, and patch management across enterprise systems. Performed regular backups and disaster-recovery testing to ensure data integrity. Applied access control policies and encryption to maintain HIPAA compliance. Documented network configurations and incident response actions.

Tools: Windows Server, Cisco ASA, Symantec, Veeam, Active Directory

Conducted defensive and offensive cyber operations protecting classified DoD networks. Monitored network traffic and mitigated real-time threats during mission-critical operations. Supported forensic investigations and provided incident reports to command leadership. Collaborated with NSA cyber teams to refine response protocols and threat intelligence processes.

Tools: Wireshark, Kali Linux, Snort IDS, Splunk, DoD Cyber Tools

Coursework: Network Security, Database Management, Systems Analysis, Web Development, Cloud Computing