• Returned in a contract role capacity working in full-stack development in application security.

• Triage, reproduce, and remediate penetration testing findings on the C8 PLM product using Burp Suite and

Postman, working across a stack including WildFly, Node.js, Microsoft SQL Server, and Docker.

• Designed and implemented improved access control framework for finer grained authorization, as well as

authorization over object creation

• Led product wide access control list changes, allowing for finer grained security configuration without regression

impact.

• Refactored login page to a modern React component, and re-configured webpack for authenticated access control and integration with authentication frameworks (OIDC).

• Remediated email REST API endpoint vulnerabilities for phishing prevention and input sanitization.

• Developed a standalone OAuth2 authentication utility using JAX-RS to secure external API integrations, managed

integration into existing C8 PLM product.

• Migrated sensitive codebase secrets to Elytron Vault, ensuring mapping of system properties to vault secrets.

• Worked directly with customers and business consultants to translate requirements into full-stack features, owning implementation from UI to backend services, and customer environment configuration

• Utilized common application security tools including Burp Suite

to reproduce pentest findings

• Identified and repaired security vulnerabilities on the C8 platform

using knowledge of fullstack development

• Triaged and responded to customer security findings and pentest

findings.

• Gained experience across multiple areas of the Centric PLM

product.

• Utilized common application security tools including Burp Suite

to reproduce pentest findings

• Identified and repaired security vulnerabilities on the C8 platform

using knowledge of fullstack development

• Triaged and responded to customer security findings and pentest

findings.

• Gained experience across multiple areas of the Centric PLM

product

• Tutored and graded coursework for **Introduction to Computer Networking** (CSE 150) and **Introduction to

Database Systems** (CSE 180)

• Provided code reviews and exam preparation for networking and database systems courses

• Worked with mininet virtual machines to evaluate network topology code

• Reviewed and graded student SQL projects for database systems coursework

• Refactored legacy Java data-access logic to integrate with a new query template and framework, improving

modularity, maintainability, and code organization.

• Wrote API endpoints and server logic for bill of material management, implementing template based creation and

efficient multi-copy features.

• Collaborated with a full stack Agile team, contributing across the stack to feature delivery and implementation