Suggestions
Michael Carlson
Security Engineering Manager at BitMEX
Professional Background
Michael Carlson is a distinguished professional in the field of cybersecurity and application security, recognized for his extensive expertise in managing security integration and enhancing development cycles through resilient practices. Currently, Michael serves as the Director of Security Engineering at 100X Group, where he leads initiatives to fortify security protocols and integrates advanced static code analysis into the development framework. His leadership style emphasizes collaboration and innovation, ensuring that security measures not only meet compliance standards but also advance the overall productivity of the development team.
Before assuming his current leadership role, Michael held multiple positions at 100X Group, including Security Engineering Manager and Security Engineer. In these roles, he honed his skills in conducting application layer penetration tests, effectively coordinating remediation efforts, and offering strategic guidance on security feature implementations, which encompass critical areas such as identity and access management and mobile application security. His ability to navigate various programming languages and frameworks—including Ruby, PHP, Java, Ruby on Rails, Drupal, and Spring—demonstrates his versatility and depth of knowledge in the cybersecurity domain.
Previous to his tenure at 100X Group, Michael was an integral part of the security team at Workday, where he advanced through several roles, including Security Red Team Lead, Senior Application Security Engineer, and Penetration Testing Manager. His notable experiences involved extensive hands-on penetration testing and application security assessments that played a pivotal role in shaping the organization’s security posture. Having initiated the penetration testing processes and managed third-party security assessments, he was proactive in ensuring all implemented measures not only met stringent audit and compliance standards but also embodied best practices in security engineering.
Moreover, his foundational experiences as an Associate Integrations Consultant and Information Technology Consultant at California State University, Chico, laid the groundwork for his successful career in information systems management and security. Michael's technical proficiency is augmented by his extensive scripting skills in Ruby and Bash, complemented by a working knowledge of Python, alongside considerable experience with XSLT and XQuery.
Education and Achievements
Michael Carlson's academic journey is laden with significant achievements. He pursued his education at California State University, Chico, where he earned a Bachelor of Science and a Master of International Studies in Information Systems Management. These programs equipped him with a solid foundation in management principles, business acumen, and the technicalities of information systems, which have been instrumental across his varied career roles. Michael's education not only deepened his understanding of complex systems but also enhanced his analytical skills, making him a sought-after advocate for security excellence in development practices.
In addition to his formal education, Michael Carlson has continued to remain engaged in the ever-evolving landscape of cybersecurity through dedicated professional development. His participation in industry conferences and certifications signifies his commitment to staying at the forefront of advancements in both technology and security strategies.
Achievements
Throughout his career, Michael Carlson has made substantial contributions that have positively impacted the organizations he has been part of. A key achievement includes significantly improving the security posture of multiple applications and systems through innovative security feature implementations. His work on conducting application penetration tests has not only identified vulnerabilities proactively but has also shaped the remediation strategies that ultimately resulted in stronger security frameworks for companies involved.
His leadership in managing third-party penetration testing illustrates his governance over compliance-related security initiatives. Michael's keen ability to provide thorough code reviews and implement robust security measures has earned him recognition within the cybersecurity community, establishing him as a credible and knowledgeable figure in application security. His success in integrating static code analysis tools into the development lifecycle exemplifies his forward-thinking approach to establishing security as a foundational aspect of software development rather than an afterthought.
With an extensive roster of professional experiences, a deep commitment to education, and a passion for security engineering, Michael Carlson acknowledges the importance of continuous growth and is dedicated to advancing the standards of cybersecurity across various industries.
