Senior Advanced Software Engineer
2011 - PRESENTHoneywell- Analyzed software architecture design and vulnerabilities with threat modeling and STRIDE using Microsoft Threat Modeling Tool.
- Implemented a CI/CD pipeline in Bitbucket and Bamboo with automated SAST using Coverity and SCA using Black Duck Hub.
- Reviewed C++ and C# code to catch vulnerabilities listed on OWASP Top 10.
- Designed industrial software architecture and implemented it in C++ and C#.
Technologies: C++, C#, ASP.NET, Visual Basic 6 (VB6), Visual Studio, Windows, Software Architecture, Agile, Scrum, Application Security, IIS, Microsoft SQL Server, Coverity, BlackDuck Protex, Jira, Confluence, Bitbucket, Bamboo, Threat Modeling, OWASP Top 10, Azure, Git, Burp SuiteSenior Developer | Team Lead | Project Manager
2009 - 2011Soprano Design- Developed telecommunication applications in C++ and C# using SMPP protocol for a telco.
- Managed and led a team of four developers and test engineers, planning and assigning tasks and bug fixes to developers on a monthly basis.
- Managed the application platform and server rollout and deployment in the Rackspace data center in Europe due to business expansion.
Technologies: Java, C#, C++, IT Project Management, Visual Studio
Jeremy Lee
Software Developer in Sydney, New South Wales, Australia
Member since November 1, 2022
Jeremy has 10+ years of cyber security experience, specializing in application security and DevSecOps. With a software engineering background, he helped agile scrum teams in all security engineering activities in the SDLC, from security requirements, secure architecture design, and threat modeling to secure code review. He has also been heavily involved in CI/CD pipelines that incorporate automated static code analysis and software component analysis, such as OSS scanning.
Jeremy is now available for hire
Portfolio
- HoneywellC++, C#, ASP.NET, Visual Basic 6 (VB6), Visual Studio, Windows...
- Soprano DesignJava, C#, C++, IT Project Management, Visual Studio
Experience
- Security Design 8 years
- Web Security 8 years
- Secure Coding 8 years
- Application Security 8 years
- Threat Modeling 8 years
- OWASP Top 10 8 years
- Agile 6 years
- CISSP 4 years
Availability
Part-time
Preferred Environment
Windows, Visual Studio, C++, C#, Threat Modeling, Jira, Confluence, Bitbucket, Bamboo
The most amazing...
...thing I've achieved is analyzing and mitigating legacy vulnerabilities and improving the security posture of many prominent industrial software products.
Employment
Experience
- Application Security Engineering
In my current workplace, I oversee and manage application security engineering tasks in our SDLC. This includes generating and reviewing security requirements of our software product, secure software architecture design, threat modeling to discover any gaps between requirements and design, reviewing data privacy, reviewing secure code, and mitigating design and coding vulnerabilities. I also oversee the CI/CD pipeline with automated build, static code analysis, software component analysis, and scanning vulnerable open-source software.
Skills
Languages
C++, C#, C, Java, Visual Basic 6 (VB6)Tools
Visual Studio, Jira, Coverity, BlackDuck Protex, Confluence, Bitbucket, Bamboo, GitParadigms
Agile, ScrumOther
Secure Coding, Application Security, Threat Modeling, OWASP Top 10, CISSP, Security Design, Web Security, Secure Storage, Software Architecture, IIS, Web App Security, Formal Methods, Certified Scrum Product Owner (CSPO), Information Security Management Systems (ISMS), IoT Security, Cloud Security, IT Project ManagementFrameworks
ASP.NETPlatforms
Windows, Unix, Azure, Burp SuiteStorage
Microsoft SQL Server
Education
- PhD in Computer Engineering1999 - 2004University of New South Wales - Sydney, NSW, Australia
- Bachelor's Degree in Computer Engineering1991 - 1994University of Western Australia - Perth, WA, Australia
Certifications
- Certified Scrum Product OwnerAPRIL 2022 - PRESENTAxisAgile
- Cloud Security Certification (CCSP)MARCH 2018 - PRESENT(ISC)²
- Certified Secure Software Lifecycle Professional (CSSLP)MARCH 2018 - PRESENT(ISC)²
- Certified Information Systems Security Professional (CISSP)MARCH 2018 - PRESENT(ISC)²
