Hello, my name is Julio R. Martinez and I am enhancing my career as an Information Security Engineer by learning how to audit, hardining software codes, focusing on the vulnerabilities and how to mitigate this findings. Montgomery College provide the needed courses to archive this goals. This efforts help me to comunicate with the developers by knowing what they do during coding. Now I believe that I posses extensive experience as a software engineer and as well as a IT Security professional. I developed an interest in Front web development after learning more about the need of identifying security critical part of the software code. Requirement needed for acreditation and validations if this web applications. I completed the certification courses. This efforts was a perfect mix of design,coding, auditing to respond to FISMA controls.

I was submerge into the IT networking, and eventually become a Information System Security Engineer. My current contract required me to be familiar with software coding specially with Front end development, now I feel that I acquired this new skills sets that make me unique in my field.

The goal for me was to identify and to expect to see far fewer security bugs in software that’s written using libraries and frameworks that make writing secure software easy. Identify plugins roles to protects against a variety of XSS attack vectors. Such to sanitizes the output to ensures the values are safe to be used in the context. Ensure that application are compartmentalize, that is the key to reducing the impact of client-side vulnerabilities. Finnaly to Utilize Content Security Policy provided by the directives that helpd define the policy that works best for project. This certification help me more developing better skills and force me to be a detailed oriented to understanding of the various web technologies.

As an IT Security Auditor be able to address each risk by understanding the distinct risks during coding, and to work with plan to develop a specific framework for testing controls, processes and other risk mitigation or compliance programs. Using risk grading, we focus on protecting data and controls for your most exposed areas with the highest priority.

As an IT Security specialist be able to created IT controls for monitoring and testing for each specific web application, after all risk are identified as a highest-risk application, and advise and provide the needed test for each NIST 800-53 appropriate controls.