The Wolfe Companies - Pittsburgh, PA
Responsible for building and developing the standard operating procedures (SOPs) and frameworks that ensured successful PCI DSS and PCI Card Production compliance during audits across financial gift card applications and a high-security manufacturing site. Spearheaded adherence to over 300 PCI requirements by designing robust processes and strengthening the security posture of both financial gift card web/mobile applications and the high-security manufacturing facility.
Implementation of application security controls and DSOMM (OWASP DevSecOps Maturity Model) efforts: including threat modeling, security testing (SAST, DAST, SCA), and penetration (to include bug bounty program) testing across all company applications, APIs, and additional IT assets. CI/CD implementations were w/in Bitbucket, AWS codedeploy, or Vercel. Enjoyed protecting and adapting to various front-end and back-end stacks while maintaining compliance and protection.
Key Achievements:
- Discovered and exploited a P1 Indirect Access Control/Broken Access Control vulnerability in which I was able to successfully enumerate and claim unclaimed gifts.
- Designed and implemented an automated a Third-Party Risk Management (TPRM) process modeled from the NIST Special Publications. Engineered a vulnerability risk equation based on critical factors (Confidentiality, Integrity, Availability, Data Sensitivity, and Business Processes) to determine minimum security controls before adoption. Automated a created ticket, calculated security requirements, and notified stakeholders from a simple Microsoft Intake Form.
- Creation of the Inherent Risk Calculator (InheRiskulator ). Simplifies the risk assessment process by turning simple "yes" or "no" answers into meaningful insights. It assigns qualitative values aligned with your organization's risk appetite, focusing on key areas such as confidentiality, integrity, availability, and accountability, while also factorin. This tool provides a clear and structured approach to evaluating risks, helping teams make informed decisions
IT Associate & Social Services Assistant
International Organization for Migration (IOM) - Guantanamo Bay, Cuba
Maintained IT infrastructure, including hardware, software, and network services. Contributed to the development and implementation of social services and internal operations for migrant support, coordinating medical care, recreational activities, and work programs.
Build trust and facilitated communication with diverse groups , including difficult individuals, by applying empathy, patience, and effective interpersonal skills, leading to positive outcomes and enhanced cooperation.
DirecTV Installation Technician
Stone Digital - San Antonio, TX
Installed Direct TV satellite dishes and professionally routed cabling and wiring across various businesses and residences. Ensured proper setup, alignment, and calibration of communication channels, including visual, radio, and satellite signals, to provide optimal service quality. Adapted quickly to the technical demands of the role, refining troubleshooting and customer communication skills to excel in a fast-paced environment.
Successfully managed this position while navigating a family crisis, demonstrating resilience, adaptability, and professionalism.
Olefins & Environmental QC Lab Technician
Royal Dutch Shell - Deer Park, TX
Conducted wet/dry bench chemical analysis and data collection necessary to support release of raw materials intermediates, effluents, and olefins finished products. Including Jet Fuel. Utilized advanced laboratory equipment for testing, including HPLC, IR, GC, and TOC analyzers, to assess product purity and stability and assign Certificate of Authenticity (CoA)s.
Key Achievements:
- Initially discovered and successfully navigated a malware infected package cybersecurity breach recovery, ensuring continuous lab operations. My lab Command and Control recovery SOP is now used as template for Disaster Recovery Operations.
Pharmaceutical Quality Control Lab Technician
