Adrian Diglio

About Adrian Diglio

PROFESSIONAL PROFILE • High-performing cybersecurity expert with 15+ years…

Experience

1. Principal Pm Manager for Secure Software Supply Chain (S3c) at Microsoft

   Microsoft

   May 2017 — Present

   March 2020 - Current: One Engineering System (1ES) • Leads the S3C team that owns the central strategy and cross-team collaboration to secure the end-to-end software supply chain for all of Microsoft\'s development teams. This includes securing how we consume and use Open Source Software (OSS), native C/C++ OSS, Linux OSS, and containers. It also involves securing our Build Tool supply chain, our CI/CD infrastructure, our build environments, and our release management systems • Published the Secure Supply Chain Consumption Framework (S2C2F) for securely consuming OSS into the developer\'s workflow, and leads the continued development and maintenance of it within the OpenSSF SIG • Also manages 1ES Security Monitoring team, SBOMs, Supply Chain Integrity evidence, build tool inventory, and build integrity validation May 2018 - Feb 2020: CDG Security • Enforced the Security Development Lifecycle (SDL) for over 2,100 services to identify and resolve vulnerabilities through the development process to enable teams to produce secure services at scale • Performed threat model reviews on some of Microsoft’s most critical services • Implemented Scrum and Agile/Lean training, processes, and standards for CDG Security. Led Services Security Assurance (SSA) team as Scrum Master. Managed team backlog, assisted in prioritizing work, and partnered with the team to ensure they deliver on their commitments • Provided security training as a subject matter expert for STRIKE events for over 500 attendees, plus other security talks across the company to influence a culture of security-minded engineers • Led Work Life Integration (WLI) pillar in the Culture & Climate team for CDG Security to provide resources and outreach initiatives to improve work life balance across the Org May 2017 - May 2018: Microsoft Consulting Services (MCS) Provided project management expertise for cybersecurity engagements to public sector and commercial customers worldwide.

Skills

• Budgets
• Networking
• Team Building
• Information Security
• Training
• Active Directory
• Requirements Analysis
• Information Assurance
• Operating Systems
• Unix
• Visio
• Computer Security
• Windows
• Diacap
• Systems Engineering
• Team Leadership
• Access
• Integration
• Windows Xp
• Project Management
• Leadership
• Vmware
• Troubleshooting
• Linux
• Virtualization
• Analysis
• Fisma
• Cisco Technologies
• Network Security
• Military
• Microsoft Office
• Quality Assurance
• Cisco Ios
• Software Documentation
• Project Planning
• Management
• Enterprise Architecture
• Security Clearance
• Program Management
• Budget