NVIDIA

NVIDIA Corporation

Product Security Incident Response Team (PSIRT) - Technical Program Manager

Oct 2024 - Present · 1 yr 1 mo | Remote | Full-time

The NVIDIA PSIRT process involves identifying, assessing, mitigating, and disclosing product security vulnerabilities to protect customers and ensure effective, coordinated incident responses.

Intel

Intel Corporation

Product Vulnerability Manager (PVM) - Product Lead

Aug 2023 - Oct 2024 · 1 yr 3 mos | Remote | Full-time

PVM is a ticketing system built on the ServiceNow framework that integrates with both internal and external systems to support the Intel PSIRT process and bug bounty programs.

Designed new features, encompassing requirement collection, storyboarding, workflow, and user experience design.
Ensured completeness of requirements gathering, established priorities, managed stakeholder communication, led feature announcements, and spearheaded maintenance planning.
Assisted the development team in transferring stories and enhancing understanding of the PSIRT workflow. Also, maintained Jira by authoring, prioritizing, executing, and updating stories.
Facilitated weekly requirements meetings, weekly demo meetings, and actively participated in daily stand-up meetings to ensure alignment with project objectives.
Validated all new features and defects delivered in the sprints in both Test and Production instances.
Performed administrative tasks to support code deployment, entitlement management, and daily PSIRT operations.
Coordinated with users to facilitate operating system and ServiceNow application updates.
Collaborated with the IT team to identify components requiring backup and monitoring.
Authored bi-weekly announcements for feature dissemination to PSIRT and ensured all stakeholders were informed of completed work and upcoming developments.

Product Security Incident Response Team (PSIRT) - Response Engineer

Jan 2022 - Aug 2023 · 1 yr 8 mos | United States | Full-time

The Intel PSIRT process involves identifying, assessing, mitigating, and disclosing product security vulnerabilities to protect customers and ensure effective, coordinated incident responses.

Implemented ongoing enhancements to foster stronger relationships with security researchers, ensuring Intel's PSIRT maintains its position as a leader in the field.
Promptly processed security reports and confidently disclosed favorable vulnerability findings.
Collaborated with fellow PSIRT engineers to establish a proactive internal Common Vulnerability Scoring System (CVSS) review board, enhancing uniformity in report scoring and classification procedures.
Streamlined communication through the delivery of machine-readable security advisories in the Common Security Advisory Framework (CSAF) format.
Devised and executed an innovative approach to translate and publish security advisories into a proprietary datastore, significantly reducing delivery time by 90%.
Overhauled the Mitre Common Vulnerabilities and Exposures (CVE) publishing process, adopting the latest JSON specification. Additionally, enriched scoring details were integrated for Collaborative Vulnerability Metadata Acceptance Process (CVMAP) engagement with CVE Numbering Authorities (CNAs).
Created a comprehensive visual representation of Mitre Common Weakness Enumerations (CWEs) using a dependency tree format. This graphical depiction encompasses all categories, providing a broader perspective on vulnerabilities.

IBM

International Business Machines

IBM Cloud for VMWare Solutions (IC4V) - Platform Architect

Nov 2020 - Jan 2022 · 1 yr 3 mos | Remote | Full-time

A flagship IC4V offering is virtual datacenter provisioning built on VMware vCloud Director, with supplemental offerings including backup, replication, and integrations with other IBM Cloud services.

Formulated a proof of concept for configuring and migrating NSXT, vSphere 7, and Avi Load Balancer, which set the course for the future of this solution.
Created a solution involving Veeam Cloud Connect Replication over Private Network Endpoint, enabling replication from external IBM Cloud accounts via a private backbone. This approach effectively curtailed egress charges for customers.
Orchestrated the implementation of a VMWare Shared GRE tunnel design, utilizing the IBM Transit Gateway to establish connectivity with classic accounts.

IBM Cloud for VMWare Solutions (IC4V) - Technical Lead

Sep 2019 - Nov 2020 · 1 yr 3 mos | Durham, NC | Full-time

Spearheaded a multi-month initiative to establish a fresh vCloud Director (vCD) single-site setup within IBM Cloud's Frankfurt datacenter. Additionally, orchestrated the expansion of this single-site vCD environment into a comprehensive three-site MZR configuration within IBM Cloud's Dallas datacenters.
Took charge of meticulously planned upgrade projects involving vCD, Veeam, vCenter, and NSX throughout the year. These efforts encompassed both software fixes and the integration of new features in response to customer demands.
Collaborated closely with a multitude of vCD customers, offering valuable insights and guidance on architectural decisions and technical hurdles.
Created publicly accessible content addressing common customer scenarios, available at: https://mlwiles.github.io/vmwaresolutions/

Watson Financial Services Sector (WFSS) - Portfolio Cloud Architect

Mar 2018 - Sep 2019 · 1 yr 7 mos | Durham, NC | Full-time

WFSS provides a managed service, including FinOps capabilities, for companies seeking to identify potential fraudulent transactions within their organization.

Played a significant role in formulating and implementing a secure infrastructure for a multi-tenant solution, utilizing analytical products within the IBM Cloud environment.
Conducted comprehensive research and practical experimentation with cutting-edge technologies, ensuring the delivery of dependable and streamlined DevOps services.

Watson Financial Services Sector (WFSS) - DevOps Technical Lead

Apr 2017 - Mar 2018 · 1 yr | Durham, NC | Full-time

Established streamlined SRE protocols encompassing deployment, patch management, cloning, monitoring, auditing, and backup strategies tailored to enhance IBM WFSS SaaS offerings.

Counter Fraud Management (CFM) - Development & Performance

Dec 2015 - Apr 2017 · 1 yr 5 mos | Durham, NC | Full-time

CFM is a suite of applications that, when integrated, provides a customizable platform for developing strategies to detect anomalous transactions.

Devised a multi-threaded J2EE architecture for asset deployment, tailored to Industry Use Case packages.
Engineered deploy agents catering to various components, including WebSphere Enterprise Applications, Batch Jobs, ICFM Business Objects, SPSS Jobs – Models – Resources, and ICFM Analysis Flows.
Successfully transitioned legacy projects to the latest ICFM paradigm, ensuring modernization and efficiency.
Provided guidance and mentorship to junior developers, fostering their growth and skill development.
Collaborated closely with architecture, testing, and documentation teams to ensure comprehensive code coverage and accuracy.
Employed agile methodologies and CI/CD practices to streamline development and deployment processes.
Established performance benchmarks, offering insightful recommendations for tuning and implementing best practices to optimize throughput.
Analyzed and enhanced message processing efficiency, boosting end-to-end throughput from an initial 120 messages/sec to an impressive 1800 messages/sec.

Counter Fraud Management (CFM) - Cloud Architect

Aug 2014 - Dec 2015 · 1 yr 5 mos | Durham, NC | Full-time

Formulated a comprehensive ICFM cloud deployment approach, catering to both SoftLayer and on-premises clientele.
Upheld data security standards by ensuring compliance with HIPAA and other PII regulations.
Devised robust DevOps strategies encompassing provisioning, diagnostics, scalability, security, and maintenance.
Engineered five VM lab-certified images for CFM, significantly reducing the deployment duration from a cumbersome 65 days to a matter of hours. This not only minimized deployment costs but also accelerated time to market.
Authored detailed documentation aimed at facilitating the seamless deployment and troubleshooting of CFM images.
Contributed significantly to the ICFM Core development team across multiple development cycles, enhancing the overall project's evolution.

IBM Lotus Connections Plug-ins - C++, C#, Java Developer

Jun 2010 - Aug 2014 · 4 yrs 3 mos | Durham, NC | Full-time

Lotus Connections is an application that offers features to enhance communication and interaction across an organization.

Played a role in the development of five successive releases of the IBM Connections Desktop Plug-ins.
Took a lead role in designing and developing a solution for Desktop file synchronization.
Enhanced the legacy .Net Plug-ins by introducing the Outlook Social Connector feature.
Collaborated with six Fortune 500 companies, providing consultation on deployment strategies and successfully resolving encountered challenges.
Pioneered the implementation of foundational elements such as source code control, build processes, and installation procedures for a new continuous delivery framework.

Lotus Quickr Connectors - C++, C#, Java Developer

Oct 2005 - Jun 2010 · 4 yrs 9 mos | Durham, NC | Full-time

Lotus Quickr is a team collaboration software that offers a rich set of content management tools, team services, and application connectors to help teams collaborate and work more efficiently online.

Assumed a leadership role in advancing Desktop Integration through robust support for SWG componentization.
Actively participated in the development of five consecutive releases of the Quickr connectors product.
Pioneered the design and implementation of a file monitoring system, automating user change synchronization with the Quickr server.
Augmented the Quickr connector portfolio by introducing Windows Shell extensions and Office Addin features, enriching user experience.
Spearheaded the creation of defect-minimized, highly functional features for Quickr, elevating product quality and performance.

WebSphere Everyplace Connection Manager (WECM) - Quality and Assurance

Aug 2004 - Oct 2005 · 1 yr 3 mos | Durham, NC | Full-time

WECM is a software solution developed by IBM to facilitate secure and seamless connectivity for mobile devices.

Established the fundamental framework and conceptualized what is currently recognized as Lotus Automator.
Orchestrated the setup of automation tests spanning over 200 clients across four distinct operating systems.
Implemented the configuration of ImagePro PXE server to effortlessly re-image WECM client machines to their original state, in addition to configuring AIX NIM and Solaris Jumpstart servers to re-image WECM gateway machines.

Intelligent Notification Services (INS) - Quality and Assurance

Sep 2002 - Aug 2004 · 2 yrs | Durham, NC | Full-time

INS is a solution designed to manage and deliver notifications across multiple channels.

Successfully completed three comprehensive test cycles for pervasive products, resulting in the identification of a significant number of defects.
Stepped in to support the team lead for the testing group as required.
Created automated test scripts utilizing Java and Perl to efficiently conduct repetitive function testing.
Organized documentation, troubleshooting strategies, and consultation sessions to assist numerous IBM clients.
Effectively managed security compliance status for a substantial portfolio of over 4500 assets.
Contributed to the writing of sections in technical papers and Redbooks, and submitted patent disclosures for INS.
Devised and executed the development of testing tools tailored for product API assessments.
Provided network infrastructure and offered support servers for multiple IBM test teams.
Engineered a customer adapter capable of sending digital messages to a Fax machine. This involved using a conversion library to control a tone generator (modulator) for precise control.

WebSphere Business Components (WSBC) - Java Developer

Feb 2000 - Aug 2001 · 1 yr 7 mos | Durham, NC | Full-time

WSBC is part of IBM's WebSphere suite, designed to help businesses develop, deploy, and manage enterprise-level applications.

Devised and executed the succeeding iteration of the WSBC installer, employing the Multiplatform version of InstallShield (ISMP).
Elevated the functionality of current InstallShield images, exclusively for WSBC on Windows.
Successfully delivered 23 simultaneous installation images punctually, upholding a commendable level of quality.
Employed Configuration Management Version Control (CMVC) for efficient code management.
Created REX and Apache Ant Tasks to automate the daily build process for installation bundles.
Actively contributed to the migration of the IBM San Francisco product, transitioning it from the Common Object Request Broker Architecture (CORBA) to J2EE Enterprise Java Beans.

Tivoli Competency Center (TCC) - Tivoli Certified Enterprise Consultant (TCEC)

May 1999 - Feb 2000 · 10 mos | Durham, NC | Full-time

TCC plays a crucial role in collaborating with IBM product teams to optimize Tivoli monitoring solutions.

Provided global consulting support to IBM product teams, contributing to Tivoli Management Framework integration as a key element of the "Tivoli Ready" initiative within the IBM Tivoli Competency Center (TCC).
Designed and implemented integration code to facilitate efficient management and monitoring of IBM Products through Tivoli Software.
Attained certification in a range of Tivoli disciplines, including Tivoli User Administration, Deployment, Enterprise Console, Distributed Monitoring, Framework, Global Enterprise Manager, and Directory Integrator.
Facilitated educational sessions and training workshops for diverse Tivoli products within the IBM portfolio.

AIT

Advanced Internet Technologies

Research and Development

Aug 2001 - Jul 2002 · 1 yr | Fayetteville, NC | Full-time

Created a dynamic shopping cart system using Javascript for streamlined hardware order processing.
Designed and implemented an innovative internet ordering system, enabling efficient provisioning of virtual server orders.
Conducted thorough analysis of company processes and services to tailor effective software solutions.
Enhanced the Perl virtual host provisioning system by rectifying disruptions and simplifying intricate procedures.
Undertook software design and development responsibilities for various company projects.
Collaborated closely with the leadership team to strategize, plan, and allocate tasks among team members.