Sr Security Analyst Tyler Technologies Inc(Client: State of Maine – InforME Portal) January 2021 - Present, Plano, TX ? Led Security initiatives for 250+ public-facing government applications, securing systems serving over 1.4M residents handling financial and healthcare data. ? Owned the end-to-end Vulnerability Threat Management (VTM) lifecycle, leveraging Tenable & Snyk to triage and remediate 300+ vulnerabilities annually based on defined risk tolerance and organizational risk appetite. ? Reduced critical vulnerabilities by 40% by implementing secure coding practices and ensuring timely risk treatment & SLA adherence. ? Led & streamlined incident response investigations(SIRT) by leveraging SIEM log correlation for technical evidence gathering, providing actionable intelligence to minimize system exposure. ? Analyzed incident trends & recurring patterns, working with cross-functional teams to reduce incident volumes. ? Performed root cause analysis (RCA) on recurring vulnerabilities, identifying & reducing repeat offenders. ? Implemented threat modeling and risk assessments to identify design-level vulnerabilities. ? Executed SAST and DAST testing using OWASP ZAP and Invicti, identifying critical vulnerabilities including SQL Injection, XSS, CSRF, and broken authentication. ? Conducted secure code reviews (PHP, Perl, JavaScript) supported by SonarQube & Semgrep to identify input validation issues, insecure session management, and authorization flaws before production deployment. ? Established a Security by Design culture across State agencies, integrating risk mitigation directly into the SDLC and reducing post-deployment security patches through expert consultation. ? Maintained perfect compliance status with NIST 800-53, PCI-DSS, and HIPAA, ensuring the continuous, legally-sound operation of critical government and healthcare digital assets.