Yves Bakalag

About Yves Bakalag

Proficient in enhancing application security practices through security-centered code reviews, strategic sprint planning, and enforcing compliance with industry standards.Dedicated to embedding security and compliance early in the development process, ensuring secure, scalable, and reliable software deployments.My experience with various DevOps and DevSecOps Tools: Veracode, AppScan, SonarQube, OWASP ZAP, Burp Suite, Snyk, Vault, AWS Secrets Manager, Aqua Security, Checkmarx, Dependabot, SCA analysis, IAST, OWASP Dependency-Check, Jenkins, GitLab CI/CD, Jira.I hold a Bachelor\'s degree in Computer Networks and Cyber Security, UMGC (2022).WHAT SETS ME APART:What sets me apart is my ability to grasp new threats, concepts, and technologies quickly. I take pride in staying up-to-date with the latest trends and best practices in the industry. I am also highly organized, detail-oriented, and able to manage multiple tasks effectively. The primary goal is to deliver high-quality software by ensuring it is secure, reliable, and performant, while maintaining maintainability and scalability.CORE COMPETENCIES & SKILLS:Soft Skills: Adaptability | Teamwork | Critical thinking | Effective Communication•Frameworks & Standards: OWASP Top 10, OWASP ASVS, NIST Cybersecurity Framework, CIS Controls, ISO 27001, GDPR, HIPAA.•Programming & Scripting: Python, Bash, PowerShell•Operating Systems: Windows Server, Linux (CentOS, Ubuntu), Containerized environments (Docker, Kubernetes).‍PROJECTS:Automating secure CI/CD pipelines.Performing API security testing.Integrating security and compliance into the SDLC.Mapped OWASP Top 10 vulnerabilities. Designing Secure Software. Implementing SAST/DAST/SCA to identify and mitigate vulnerabilities. CONTACT:I am always open to new opportunities and networking with like-minded professionals in the cybersecurity industry. Feel free to contact me via email at: Email: y••••••••@gmail.com

Experience

1. Application Security Engineer

   D2soft Intelligence

   Jan 2023 — Present

   Led security involvement in sprint planning and backlog grooming using Microsoft Threat Modeling Tool, integrating threat models into user stories and confirming security was part of the DoD.• Conducted security-focused code reviews with Veracode, ensuring backlog items related to sensitive code areas met security requirements and aligned with the architecture.• Enabled comprehensive business logic testing in Burp Suite as measured by the successful identification of logic flaws, by configuring the tool to test for issues like broken access controls.

Education

• Prince George's Community College

  Associate of Applied Science

  2018 — 2021

• University of Maryland

  Bachelor of Science - BS