Open to opportunities

Brian Huth

@brianhuth

Message

I secure web, API, and AI-integrated applications through testing, engineering, and security leadership.

United States

Message

What I'm looking for

I'm looking to advance application security through hands-on testing, secure development guidance, AI-assisted security evaluation, and scalable DevSecOps improvements.

I lead application security work at Cox Communications, performing code reviews, penetration tests, and vulnerability remediation guidance across internal applications.

I've integrated AI-assisted SAST and DAST scanning, assessed MCP and n8n AI workflows, and evaluated LLM risks including prompt injection, data leakage, model abuse, and insecure output handling.

At Fortify on Demand, I directed an Americas DAST team of up to 14 engineers across the US and Costa Rica while improving scan reliability, API security testing, and customer outcomes. I also built Jython extensions for Burp Suite, including Wappalyzer integration and admin portal automation.

Earlier at the University of Georgia, I established application security metrics using OpenSAMM, built vulnerability tracking processes, strengthened security architecture, and trained developers on vulnerability prevention.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Lead Engineer

Current

Cox Communications Inc.

Sep 2024 - Present (1 year 11 months)

Senior contributor on the Application Security team performing code reviews, manual penetration tests, and vulnerability identification. Conducts AI-assisted SAST and DAST scans, MCP security evaluations, and security reviews of n8n AI workflows.

Application Security SAST DAST Penetration Testing AI Security LLM Security MCP N8n Secure Coding Vulnerability Management OWASP CI CD

Treasurer, Executive Board

The Rescue at Spirit Ridge Farm

Feb 2021 - Aug 2024 (3 years 6 months)

Served as Treasurer on the Executive Board, overseeing financial planning and reporting. Assisted in planning and executing fundraising events to support program operations.

Financial Planning Reporting Fundraising Non Profit

Manager, Software Security Engineering

Fortify on Demand (MicroFocus/OpenText)

Oct 2021 - Jul 2024 (2 years 9 months)

Directed the Americas DAST team of up to 14 engineers, managing personnel and client engagements. Improved automated scanning accuracy, implemented AI tooling, and developed Jython extensions for Burp Suite.

DAST Burp suite Team Management Vulnerability Management API Security AI Tooling XSS SQL Injection

Information Security Tester III

Fortify on Demand (HPe/MicroFocus)

Nov 2016 - Oct 2021 (4 years 11 months)

Conducted web application security audits and vulnerability assessments using Burp Suite and WebInspect. Developed Jython plugins, delivered security training, and executed proof-of-value engagements.

Burp suite Web Application Security Vulnerability Assessment Security Training Client Engagement

Applications Analyst Principal

University of Georgia

Aug 2013 - Nov 2016 (3 years 3 months)

Supervised Security and Access Controls, managed three direct reports, and established security architecture. Designed QA moves-to-production process in JIRA and developed security awareness training.

Security Management Penetration Testing Jira Vulnerability Management Security Awareness Team Leadership

System Administrator Specialist

University of Georgia

Aug 2005 - Aug 2013 (8 years)

Delivered networking, security, and software support for the UGA IBM z/series mainframe, including TCPIP, SSL, FTP, cryptography, and Unix/Linux systems. Implemented mainframe security hardening measures.

Mainframe TCP IP SSL FTP Cryptography IPSEC Unix Linux Security Hardening

Applications Programmer Specialist

University of Georgia

Feb 2001 - Jul 2005 (4 years 5 months)

Developed and maintained Student Financial Aid systems, designed and taught an Introduction to XML course, and produced technical documentation for legacy web-enablement tools and Java Servlet integrations.

Financial Aid Systems XML Servlet Technical Documentation