At Loginsoft, I triage CVEs and GitHub Security Advisories in Java and Spring libraries, trace vulnerabilities through source code and commit history, and backport verified fixes to client-pinned legacy branches. I validate patches in Docker and Bazel CI, including checks for regressions and backward API compatibility.
At Infosys, for CareFirst BlueCross BlueShield, I led the migration of the authentication platform from Okta to Microsoft Entra ID as sole Java architect. I hardened SSO and OAuth 2.0 flows, reduced SSO latency by 30%, and completed the migration with zero customer-facing downtime.
For CVS Caremark, I remediated all Checkmarx high-severity findings within two sprints and delivered secure Spring Boot microservices integrated with AWS S3 and RDS PostgreSQL. I also used OWASP ZAP and Postman to verify API security fixes.
For MetLife, I optimized SQL queries and Hibernate mappings, reducing average API response time by 35% and server load. I also applied security scanning to address SQL injection risks and vulnerable libraries.
