milton smith

senior principal application security consultant

About

Java platform BISO | 3x Black Hat conference speaker | Technical editor/contributor book, Iron-Clad Java: Building Secure Web Applications

Country

united states

City

pleasant hill

Industry

computer software

Skill

security, computer security, cloud computing, software development, enterprise software, information security, application security, network security, architecture, java, sdlc, disaster recovery, leadership, enterprise architecture, information technology, penetration testing, identity management, programming, distributed systems, business intelligence, soa, saas, unix, application security architecture, vulnerability management, perl, architectures, security architecture design, cissp, requirements analysis, team leadership, service oriented architecture, csslp, software development life cycle, identity and access management

Experience

senior principal application security consultant

oracle

self employed

appsec alchemy

2018-10 - Present · 8 yrs

Security architecture, secure coding & review, and education

principal software engineer, application security

yahoo

2011-6 - 2012-8 · 1 yr 3 mos

senior security architect

ercot

2005-12 - 2010-6 · 4 yrs 7 mos

software engineer

willows software

1995-1 - 1996-1 · 1 yr 1 mo

Cross-platform automation tools development. Commercial version of Linux Wine open source project.

senior software engineer

viador

1998-1 - 1999-1 · 1 yr 1 mo

Develop and optimize object models for application infrastructure. (more in resume)

software engineer

vilink

1996-1 - 1998-9 · 2 yrs 9 mos

Startup company using Internet technology to standardize insurance industry challenges

information systems security administrator

casco

1988-1 - 1990-1 · 2 yrs 1 mo

Responsible for enterprise security, disaster recovery, working with internal and external auditors. (more in resume)

lead security engineer

sap successfactors

2010-6 - 2011-7 · 1 yr 2 mos

* Lead Security Engineer - SuccessFactors (now SAP), * Develop and manage global Security Engineering team for one of the largest cloud application companies in the world. Develop and manage security controls throughout the development lifecycle: architecture, static analysis, dynamic analysis, vulnerability management, compliance, etc. * Manage global Security Engineering team (Shanghai and US) * Develop and monitor automated security controls within the software development lifecycle * Report to CIO and regularly deliver security progress to C-level executives * Manage security concerns for transition of corporate acquisitions. Assisted with purchase and integration of companies like CubeTree and Plateau * Foster deep customer adoption of cloud products by reducing security concerns: evangelize security, white papers and books, and speaking engagements as required * Provide expert leadership to customers and engineering for project security concerns and challenges. Negotiate contracts with vendors.

senior software engineer

brio software méxico

1999-1 - 2004-1 · 5 yrs 1 mo

* After Hyperion acquired Brio, I was invited to join Hyperion’s Core Technology Group (CTG). CTG was chartered to build the unifying security model driving Hyperion’s 16 major product lines – a 2 billion dollar company. * A couple of my noteworthy accomplishments on this team included: * Delivery of two successful commercial software releases of the security infrastructure that drives all Hyperion product lines, * Resolved critical flaws in the previous identity management scheme based on a poor assumption that Windows SIDs are unique * My responsibility was to support all aspects of Hyperion’s security platform from design, coding, interfacing with QA, writing technical documentation, to delivery. Everything it takes to make a release successful from start to finish.