Command Line Interfaces: Linux Bash, Windows Powershell
Proprietary Software: Cascade Server Management, Sharepoint, CMS
Version Control: Git, Github, Bit Bucket
Task Assignment: Asana, JIRA, ZenHub
Work Experience
Toyota Motor Company North America
Senior Security Analyst
Feb 2022 — Present
Developed cybersecurity libraries and APIs for both the 2024 and 2021 model years of Toyota Vehicle that enabled cryptographic signing, verification, encryption, and decryption utilizing many different cipher suites.These services were used to protect software that was deployed directly to vehicle Electronic Control Units (ECU).
Designed and implemented Plug and Charge (PnC) services for electric vehicles that allowed for enrollment of vehicles, provisioning of certificates and contracts, and installation of these contracts onto the vehicle for various mobility providers. This service permits a user to drive up to a charger and automatically authenticate and pay for charging with a paired payment method.
Built a service for enabling secure boot employed by a Trailer Camera unit using a Texas Instrument standard. This service employed 8 different microservices and lambdas in order to cryptographically sign and encrypt data for transfer to two different vehicle electronic control units (ECUs).
Created an automated testing suite utilizing python in order to regression test existing systems
Implemented continuous integration and continuous deployment utilizing Github Actions, SonarQube, JFrog, X-Ray, and Terraform.
Wrote and distributed our team's Golang coding standards document. Led and mentored junior team members in secure coding best practices.
Created a signing service that facilitated Microsoft Authenticode signing of software packages running in a Linux Docker container, utilizing an on-premises Hardware Security Module (HSM).
Developed and maintained comprehensive development and architectural documentation, including sequence diagrams, C1-C4 architecture data flow models, high-level diagrams, and software
Implemented Advanced Encryption Standard (AES), and Elliptic-Curve Integrated Encryption Scheme (ECIES) for use in our cryptographic libraries.
Utilized Galois Counter Mode (GCM) and Cipher-Block Chaining (CBC) modes for encryption
Provided support for ECDSA, HMAC, CMAC, RSA, and Ed25519 signing algorithms to be utilized by either our cloud HSM, native HSM, or local signing implementations
Built tools to assist in the automatic creation of signed certificate chains for mTLS connections
Implemented mTLS 1.3 server connections for PnC and other projects
Toyota Motor Company North America
Back-End Python Developer
Oct 2019 — Feb 2022
Created a tool that imports security vulnerability reports from a bug bounty program in Archer for remediation
Developed an AWS service using Lambda responsible for importing Archer case details into Jira securely
Developed an AWS service responsible for updating sharepoint permissions of vulnerability remediation cases based upon a jira workflow
Assisted in developing and architecting a Test Automation Platform (TAP) that allowed automatic provisioning, coordination, and testing of vehicle head units in the cloud.
Assisted in the creation of the 2021 year model of Toyota cryptographic libraries and cybersecurity suites used for protecting ECU software.
5Ms Mineral Management
Full Stack Developer
Aug 2016 — Aug 2019
Created an Alerts system back and front end that allowed the creation of customizable metrics to generate specific types of Alerts, and facilitated the pushing of these alerts at specified intervals.
Optimized the SQL Database to permit faster querying of results sitewide.
Content-Management System Creation
Maintained the security standards of the Mineralware application, which allowed us to pass a SOC-2 security audit.
Maintained and improved upon existing GIS architecture.
University of Texas at Arlington
Web Specialist
Aug 2013 — Jul 2016
Generated interactive HTML documentation, and created a suite of automated tests for all existing front-end interfaces and applications.
The testing framework utilized Chai-as-promised assertion chaining, Selenium running headless, and WebDriver for controlling the browser.
Developed internal applications with Bootstrap Frontend, utilizing responsive design principles.
Created in-house tools to automatically generate useful metrics for different database tables.