Michael F. S.

About Michael F. S.

I am a senior technologist and subject matter expert in the area of Software Engineering and Application Security. My proven track record over 25+ years combines software craftsmanship and process engineering, leaving behind solutions where I have found problems. I am a passionate supporter of the Agile and DevSecOps movements, applying strategies like Kaizen and the five focusing steps. My current role has me engaged applying techniques from app modernization and automation to securing the enterprise as it continues to expand into the public cloud. With experience in multiple sectors and verticals, from the small startup to giant “Big 4” scale, I bring a unique perspective on building teams, applying strategic thinking to set a vision, developing a roadmap, and leading teams to excellence in execution. As a strong believer in continuous learning, mentoring, and shaping culture my goal is to build strong, cohesive teams that are greater than just a sum of their members.Headline Achievements:• Spent 6.5 years at the forefront of AppSec at KPMG International, contributing both to the strategic vision of the Global Information Security Group and worked in the field directing multiple teams in executing on the vision.• Rebuilt, nearly from scratch, a code review program with real measurable business outcomes: applications with reduced aggregate risk profiles, verified vulnerabilities caught earlier in the release cycle, and shifting security left to build solutions that leverage cloud-native patterns configured to be secure by design.• Working closely with the Global Deputy CISO, I helped to discover efficiency improvements, drive process optimizations, and standardize delivery processes for a key GISG service line, Solution Reviews (security assessments for cloud software solutions). The number of reviews performed FY2024 increased to nearly 6x the number performed 6 years ago.• Built collaborative working relationships with the Global Head of Solutions and other Leaders in the KPMG Global Solutions Group. I have had many opportunities to influence others, improving global development projects by leading across functional boundaries.If you need to build one or more DevSecOps teams, I am your man.If you need to secure your software development lifecycle, I am your man.If you need a leader in AppSec / Software Security Audits, I am your man.If you need help with software project governance and security, I am your man.

Experience

1. Associate Director Senior Devsecops Specialist and Product Owner Devsecops Tools

   KPMG

   Mar 2024 — Present · Cleveland, OH, US

   Directed, designed, and lead the implementation of a comprehensive product strategy functioning as the product / business owner for DevSecOps tools within KPMG\'s Global Delivery Modernization Group. Analyzed market trends, performed competitive analysis, defined strategy, authored product roadmaps, prioritized features, and tracked progress. Liaise with internal departments to solicit business need to move tooling through the entire lifecycle: concept, design, launch, steady-state, support, and end-of-life.Responsibilities:• Lead at the intersection of technology and business need• Help all constituencies to reach peak productivity through coaching and mentoring• Ensure tools follow security standards, alignment with technical controls, and reference architectures.• Develop system integration strategies that promote the use of common tools and processes.• Participate in technical review boards, including working with vendors on co-design.• Resolve impediments impacting project teams on their \'path to production.\'• Maintain user guides, configuration, and roadmaps • Support Global Functions (Tax, Audit, etc.) and member firms in use of DevSecOps tools.

Education

• Case Western Reserve University

  BS, Computer Science

  2001 — 2006

Skills

• Web Services
• Design Patterns
• Jquery
• Web Applications
• Mvc
• Visual Studio
• Css
• Agile Methodologies
• Html
• Sql
• Windows Azure Paas
• Asp.net
• Sql Server
• Sql Database Design
• Ssrs
• Sharepoint 2010
• Asp.net Ajax
• Software Engineering
• Object Oriented Design
• C#
• .net
• Sharepoint
• Soa
• Databases
• Microsoft Sql Server
• Tfs
• Software Development
• Programming
• Web Development
• Sql Azure
• Ado.net
• Software Design
• Xml
• Database Design
• Windows Azure
• Asp.net Mvc
• Wcf
• Security
• Enterprise Software
• Enterprise Architecture