USC Marshall School of Business

University of Southern California

UC San Diego

ServiceTitan

Sr. Principal, Application Security Architect

Principal, Application Security Architect

•	Awarded Green Dot Superstar. Only a select few overall are chosen.
•	Managed security leads and engineers with a focus on effective code mitigation, risk management, and professional development.
•	Recruited, hired and trained security engineer staff in Pasadena and Shanghai.
•	Created financial forecasts, outline expenditures and modify budget when necessary.
•	Assessed and integrated new innovative application security and DevSecOps technologies.
•	Evaluated the Building Security In A Maturity Model (BSIMM) to mature the Application Security program.
•	Produced meaningful metrics to identify and relay the state of the Application Security program.

Green Dot Corporation

Senior Manager, Application Security Engineering

Recruited by CISO to relocate and head the Application Security program at the leading financial technology company that pioneered the reloadable prepaid debit card.
•	Responsible for identifying and mitigating architectural security risks for all projects, including the Banking as a Service platform (e.g. Apple Pay Cash, Uber Instant Pay, Stash) while still meeting aggressive deliverable dates and business objectives.
•	Chaired architectural review board to facilitate discussion and concerns from various organizations.
•	Partnered with the organization leaders, architects, and product owners to perform a security feature and threat model review, and then shared feedback to other business units and enhanced their products.
•	Streamlined product security design review for 8 Dev Directors, 24 Dev Managers, 11 Product Owners and ensured strategic information security requirements are met.
•	Grew and expanded the Application Security program to cover 6 new acquisitions (AccountNow, AchieveCard, UniRush, Tax Products Group, InsightCards, RapidPay) to cover over 200 developers.
•	Increased secure coding coverage from scanning a few projects to cover all 1 terabyte of source code and achieved a security posture of deploying 0 critical and high vulnerabilities.
•	Minimized the need for manual code scans by automating the secure SDLC process for CI/CD and maximized developer productivity growth through 50% improvement in scan time.
•	Reduced attack vectors for newly deployed capitalized projects by performing Penetration Testing for Web Apps, Mobile Apps, APIs.
•	Optimized Hardware Security Module (HSM) architecture for cryptographic needs to handle both on premise and cloud implementations across 3 data centers.
•	Oversaw training programs and knowledge base articles to train 200 developers on secure coding development practices and OWASP Top 10.
•	Participated in Third Party Risk Management review of vendors and partners.
•	Achieved compliance with PCI-DSS, GLBA, and SOX.

Manager, Application Security Engineering

•	Delivered 4 concurrent projects with budgets ranging from $250k to $1 million and cross-functional teams of up to 6 developers and analysts.
•	Minimized risk factors that brought 2 projects back on track and delivered on schedule within budget.
•	Introduced rollout of Carbon Black Bit 9 as a replacement for existing end point protection for high risk employees, saving 25% in cost.

The Boeing Company

Information Security Project Manager

•	Spoke and presented at Transglobal Secure Collaboration Program (TSCP) Business Week and Symposium events twice a year (Europe and Washington D.C.), regarding secure collaboration.
•	Delivered as Project Manager the TSCP’s Information Labeling & Handling (ILH) specifications working with government and defense industry partners in Europe and U.S.
•	Produced and hardened 2 Boeing lab servers and applications pertaining to TSPC demos.
•	Published 1 external whitepaper on secure collaboration capabilities based on identity federation, information labeling, and handling specifications.

Government and Defense Industrial Base Strategies

•	Contributed to “Did You Know” video for the launch of Boeing’s Cyber Engagement Center (CEC).
•	Generated demos, scripts, and scenarios of Boeing’s cyber capabilities for the CEC launch.
•	Delivered cybersecurity responses for new business opportunities for RFPs and RFIs.
•	Accelerated information security exchanges resulting from NDAs/PIAs with 3rd party companies.

Business Development and Cyber Program Support

•	Consulted with government agencies, customers, suppliers, and company personnel that facilitated the implementation of protective controls to ensure computer security compliance.
•	Accelerated participation and decision making for the Architecture Review Board that I chaired. 
•	Produced security assessment reports for the acquisition and divestiture team.
•	Contributed and participated with University of Washington to sponsor the Pacific Rim Collegiate Cyber Defense Competition that led to hiring talented participants identified during the competition.

Information Technology Security Advisor

•	Delivered securely tested custom software applications used to provide quality assessments of satellite factory parts.
•	Contributed in peer reviews and gate closure meetings and also provided recommendations.

Paul Intrarakha