Profiles search
Nicholas C.
Information Security Consultant at State Farm
Richardson, TX, United States
Details
Experience:
Product Owner for a Security Champions program, supporting 200+ product team
volunteers to connect with security staff, attend weekly security presentations, and apply a
security perspective in their everyday work.
Partnered with Security Champions and technology area leadership to develop security OKRs to address vulnerabilities, incorporate security in design decisions, and reduce security risk.
Provided consulting on the design, delivery and quality of software solutions through risk
management, guidance, education, and information security expertise for product teams.
Developed and published security best practices for threat modeling and integrating security
requirements, tools, and staff into each phase of the Software Development Lifecycle (SDLC).
2018 : Present
State Farm ®
Information Security Consultant
Security partner to product teams when navigating Information Security processes, tools, and staff to secure software solutions.
Integrated security requirements and design into Agile planning activities to ensure that the
implementation of information security is included throughout the delivery and support of
software solutions.
Analyzed security code scan results to recommend remediation options to product teams and provide vulnerability education to software developers.
2016 : 2018
State Farm ®
Security Analyst
Working with other Java engineers on the testing and programming of products and concepts currently defined in the software engineering department.
2015 : 2015
AMX by HARMAN
Software Engineer Intern
Responsible for developing a data-driven ASP.NET/VB.NET web application.
2014 : 2014
Cornerstone Automation Systems, LLC (CASI)
Software Engineer Internship
Primarily responsible for issue reproduction, bug fix evaluation, and laboratory setups. Also performed troubleshooting during laboratory setups and issue replications. Participated in triage and troubleshooting situations with live customer issues.
2012 : 2014
Calix, Inc.
Network Engineer Intern
volunteers to connect with security staff, attend weekly security presentations, and apply a
security perspective in their everyday work.
Partnered with Security Champions and technology area leadership to develop security OKRs to address vulnerabilities, incorporate security in design decisions, and reduce security risk.
Provided consulting on the design, delivery and quality of software solutions through risk
management, guidance, education, and information security expertise for product teams.
Developed and published security best practices for threat modeling and integrating security
requirements, tools, and staff into each phase of the Software Development Lifecycle (SDLC).
2018 : Present
State Farm ®
Information Security Consultant
Security partner to product teams when navigating Information Security processes, tools, and staff to secure software solutions.
Integrated security requirements and design into Agile planning activities to ensure that the
implementation of information security is included throughout the delivery and support of
software solutions.
Analyzed security code scan results to recommend remediation options to product teams and provide vulnerability education to software developers.
2016 : 2018
State Farm ®
Security Analyst
Working with other Java engineers on the testing and programming of products and concepts currently defined in the software engineering department.
2015 : 2015
AMX by HARMAN
Software Engineer Intern
Responsible for developing a data-driven ASP.NET/VB.NET web application.
2014 : 2014
Cornerstone Automation Systems, LLC (CASI)
Software Engineer Internship
Primarily responsible for issue reproduction, bug fix evaluation, and laboratory setups. Also performed troubleshooting during laboratory setups and issue replications. Participated in triage and troubleshooting situations with live customer issues.
2012 : 2014
Calix, Inc.
Network Engineer Intern
Company:
State Farm ®
About
Information Security Consultant interested in risk quantification, application security, and
cryptography. Passionate about empowering others to make high quality risk-informed security and privacy decisions, from software developers through C-suite executives. Experienced in growing security culture and community by establishing shared goals, promoting transparency, and fostering inclusiveness.