Thomas Fahey

Background

About Thomas Fahey

Experienced Cyber Security Architect and Consultant with over 13 years of experience in Cyber Security and Full-Stack development, including CI/CD. Successful Business Liaison between executive management and information technology. Effective Cyber Security Architect, skilled at training the technical team on implementing effective security controls. Good communicator with the ability to articulate information security concepts, including threats, vulnerabilities, and risks, to all lines of business. Able to express high-level concepts and deep-dive technical details, depending on the audience. Certified Security Professional, holding the CISSP Certification, and the GCSA (Cloud Security Automation) certification. Active Member of ISSA, OWASP, and ACM. Passionate about cloud security and CI/CD. • 20+ years software development experience • 13 years in Cyber Security, with a concentration in Application Security and System Security, DAST tools (Burp Suite Pro, Fortify WebInspect, Nessus) and SAST (Fortify SCA), RSA Archer • 17 years Core Java experience, in development, architecture, and security architecture • 17 years designing and architecting IT systems and applications for high availability and fault tolerance • 20+ years experience in Object-Oriented software development (languages: Smalltalk, Java, C++) • Designed and taught the first Object Oriented programming course at a local community college • 20+ years experience with SQL and relational databases such as DB2, Oracle, MySQL, and PostgreSQL • 10+ years experience with UNIX, Linux, and Solaris • 10+ years experience with HTML and CSS • 10+ years experience with JavaScript • 10+ years UML experience designing applications • 7 years experience with website performance analysis and tuning • 6 years Jenkins CI/CD experience plus concurrent 3 years DevOps experience • Experience with SharePoint, Documentum, DataStage, DataPower, MS Office • Training in AWS (CloudFormation, CodePipeline), Azure, Puppet, Vagrant, Docker, Hadoop, MongoDB, Node, Python • GIAC certification - GCSA – Cloud Security Automation