At AT&T Chief Information Office, I administer enterprise application security platforms, including Veracode, SonarQube Server and Cloud, and GitHub Advanced Security. I support development teams across a telecommunications environment and work with partner teams to resolve platform and integration issues.
I integrated Veracode into CI/CD pipelines, reducing the time to identify and remediate security issues by 50%. I also reduced critical vulnerabilities by 40% within the first six months and conducted more than 20 training sessions that increased secure coding compliance by 30%.
I modernized SonarQube through automated reviews, CI integrations, and custom tooling, reducing code vulnerabilities by 50%. I also built a standalone Veracode workflow for RevUP and supported the SonarQube Cloud migration by validating Azure DevOps and Jenkins solutions and documenting the upgrade path.
