Derrick Shofner

Background

About Derrick Shofner

Growth-focused and accomplished Security Engineer with 10 years of experience in Application Security Testing (IAST, DAST, SAST, SCA)(Veracode, Checkmarx, AppScan, AppSpider, Web Inspect, Burp Suite, ZAP) • Utilize Burp Suite Professional for testing traffic, MITM attack testing, SQLi • Provided vulnerability assessment (external, internal) using NMAP, Sonarcube, Trustwave, and Nessus • Experience in working with peers (in Security) as well as upper management to do a top-down approach to implementing cloud security controls • Worked with Symantec End Point protection (12.0 -15.0) to protect personally identifiable information (PII) • Experience using Jira software for Agile/Scrum and Kaban for project tracking • Experience in resolving software issues, and connectivity troubleshooting • Knowledgeable with languages Python, Node.js, Java.NET, C# troubleshooting errors, code review • Experience working with containers (Docker, Kubernetes, Linux Open Shift) • Experience in using Continuous Integration/Continuous Deployment (Team City, Jenkins) • Integration of Security testing tools (code review, application testing) • Experience working with Defect tracking (TFS, Jira, Kaban tracking in MS teams) • Performed engineering and administrative duties for Active Directory Federation Services (ADFS) and migrated existing Relaying Party Trusts to Azure AD • Worked with development and operations on best practices for rolling out applications using Scrum and DevOps principles. • Articulate and refined communicator with strong leadership skills