David Dorfeld

About David Dorfeld

Core Competencies: Penetration Testing, Bug Bounty Management, Vulnerability & Threat Hunting, Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Mobile Application Security Testing (MAST), API Security Testing, SAP Security & Compliance, Software Composition Analysis (SCA), Infrastructure Vulnerability Management & Policy Compliance, Cloud SecurityTools: Kali Linux, Burp Suite, Nmap, Metasploit, Qualys, Tenable, Invicti, GitHub Advanced Security, Fortify WebInspect & SCA, Onapsis, Wiz, HackerOne

Experience

1. Senior Application Security Specialist

   Newell Brands

   Jan 2023 — Present

   Established holistic Application Security (AppSec) Program covering 500+ applications across numerous business units & regions that incorporates: Application Security Testing (AST) including DAST, SAST, SCA, Secret Scanning, MAST, and API Security Application Security (AppSec) Policies, Standards, Procedures, & Runbooks Reporting, metrics, and Key Performance Indicators (KPIs) Cloud-Native Application Security (AppSec) Capabilities: Infrastructure as Code (Iac) Scanning and Container & Kubernetes Security• Maintain multi-year goals, initiatives, and strategy for Application Security (AppSec).• Manage and coordinate Cloud, Network, and Application Penetration Testing performed by External Security Providers.• Manage Vulnerability Disclosures from External Researchers.

Education

• Kennesaw State University

  Bachelor of Business Administration (BBA), Information Systems

  2010 — 2014

• Kennesaw State University

  Master of Business Administration (MBA)

  2016 — 2018

Skills

• Strong Work Ethic
• Customer Service
• Servers
• Vmware
• Server Hardening
• System Administration
• Active Directory
• Windows Server
• Information Security
• Vulnerability Management
• Virtualization
• Windows 7
• IT Service Management
• Visio
• Troubleshooting
• Self Management