Matt G.

Background

About Matt G.

Hello! Thank you for taking the time to learn a little about me. I am a passionate programmer with a keen interest in application security. Over the past few years, I've dedicated myself to securing applications while nurturing my love for coding and automation. If you were to ask me about my strongest qualities, I would say it's my genuine joy in helping others and my knack for solving complex problems. In my current role at TIAA, a Fortune 100 company with over employees and managing assets worth more than $1.3 trillion, I serve as the Lead Application Security Manager. Reporting to the Managing Director of DevSecOps and Cloud Security, I manage a global team of 10 engineers responsible for securing our web applications throughout the development lifecycle. My focus is on creating a seamless experience between development and security teams through automation, education, and enhanced developer experience. Key Highlights from My Experience at TIAA: Efficiency Improvement: Automated onboarding processes within the CI/CD pipeline, reducing onboarding time from a full day to mere minutes. Successfully implemented and adopted Snyk SAST and SCA, improving overall code and third-party library security. Security Enhancements: Managed Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Interactive Application Security Testing (IAST) tools for over developers and 2,500+ applications, strengthening our security posture. Product Ownership: Led the evaluation and comparison of SAST, DAST, IAST, SCA, IaC, ASPM, and API tools as part of our 2023 security strategy, driving informed decisions and securing three new capabilities. Team Development: Mentored and coached team members, resulting in all being promoted within two years across the US and India. Vendor Management: Matured relationships with vendors like Checkmarx, Snyk, PortSwigger, Nowsecure, JFrog, and Contrast, ensuring robust support for our security initiatives. Skills: • Snyk • Core Java • Checkmarx • Contrast Security Throughout my journey at TIAA, I've consistently bridged the gap between application development and security. Leveraging my extensive experience, I have fostered collaboration and integration, driving essential projects and achieving organizational goals. My expertise in application security and development allows me to deliver safer, more secure, and exceptional applications for our valued clients. I am excited to continue leveraging my skills to enhance our security posture and contribute to the success of our organization.