Richard Rodriguez

Sr Security Software Engineer @Evertec

Perform as an SME and Mentor for our DevSecOps Group. Report directly to our Division Director and also work closely with our Chief Information Security Officer to proactively identify strategies and resolve security risks, issues, and security incidents. Analyze risk and formulate procedures for effective remediation or mitigation of identified vulnerabilities of network, systems, and applications. Report on findings and recommendations for corrective action. Constantly develop strategies to remediate or mitigate obsolete components on infrastructure and applications. Perform vulnerability assessments as assigned utilizing IT security tools and methodologies such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework. Perform assessments of the IT security/risk posture within the IT network, systems, and software applications, in addition to Cyber Security (CS) assessments. Conduct Static Code Analysis and Dynamic Code Analysis on multiple applications and different service structures such as IaaS, PaaS, SaaS. Identify and Plan for opportunities to reduce risk and document remediation options regarding acceptance or mitigation of risk scenarios. Developing strategies and standards that would reduce or eliminate risk threats in complex environments also ensure compliance with Payment Card Industry Data Security Standard (PCI DSS) Standards. Facilitate and monitor the performance of CI/CD initiatives utilizing technology such as Nexus, Docker, and Jenkins for the deployment of deliverables. Maintain oversight of IT vendors regarding the security maintenance of their systems and applications. Research on new technologies for Static Code Analysis, Penetration Test, Mobile Application Security, and Infrastructure Security Scanning. Constantly provide reports on project status and security governance including but not limited to outstanding issues and vulnerability threats. Provide assistance in all IT audits, and IT risk assessments.