About Me
I am a dedicated application security professional with a background in QA testing. I hold an MS in Cyber Security and a BS in Computer Information Systems. My Security+ certification highlights my expertise in safeguarding information systems. I am passionate about using my skills to protect and enhance digital infrastructures, making me a strong candidate for application security roles and beyond.
- matthewdouglee@gmail.com
- 631-935-2858
- New York, United States
- mattplum.github.io
Work Experience
Application Systems Analyst @ Chainbridge Technologies
02/2025 - 08/2025, Remote- Investigated and responded to security requests and incidents for FEMA, supporting incident response efforts.
- Automated analysis of Nessus scan results using custom Python scripts integrated with SQL database.
- Executed Fortify SAST/DAST scans and performed remediation on RHEL VMs using Bash scripting to address security vulnerabilities.
- Handled POA&Ms for government compliance and risk management.
Application Security Analyst II @ Texas A&M
12/2023 - 01/2025, College Station, TX- Performed penetration testing on web applications using Kali Linux VMs.
- Conducted SAST and DAST scans on web applications, collaborating with development teams to identify and remediate critical vulnerabilities.
- Created Bash/Powershell scripts to filter vulnerabilities via Nessus scans in Security Center.
- Developed Python API scripts to bolster security operations and maintained a C# .NET security application utilizing Github for version control.
Senior QA Test Engineer @ Con Edison
10/2019 - 10/2021- Served as a consultant for Con Edison, supporting IT operations and maintaining information assurance using Jira and Azure DevOps.
- Integrated automated testing into CI/CD pipelines and developed a secure test automation framework in C# to enhance DevSecOps practices.
- Identified and resolved critical issues through vulnerability testing and proactive remediation within development and production environments.
Senior QA Test Engineer @ Con Edison
10/2020 - 10/2021- Served as a consultant for Con Edison, supporting IT operations and maintaining information assurance using Jira and Azure DevOps.
- Integrated automated testing into CI/CD pipelines and developed a secure test automation framework in C# to enhance DevSecOps practices.
- Identified and resolved critical issues through vulnerability testing and proactive remediation within development and production environments.
QA Test Engineer @ Real Time Technology Solutions
10/2019 - 10/2020- Developed a secure automation testing framework in C#.
- Collaborated on an AGILE team to implement CI/CD pipelines.
- Provided IT support and maintained information assurance using Jira and Azure DevOps.
Education
Master of Science in Cyber Security
Grove School of Engineering, City College of New York08/2021 - 06/2023 Honors: Summa cum laude
Bachelor of Science in Computer Information Systems
University of Delaware08/2015 - 05/2019
Skills
Certificates
Projects
Nessus Scan Comparison Tool
A web-based tool for comparing two Nessus vulnerability scan files to identify new, existing, and resolved vulnerabilities. Built with Flask, this tool parses .nessus files and provides an intuitive interface for security professionals to analyze scan differences. Features include automatic file parsing, vulnerability categorization, and a clean dashboard showing the comparison results. Perfect for tracking security posture improvements over time and identifying emerging threats.
Furbo Camera Hack
Hacked into my Furbo camera and gained root access. Used Burp Suite to find an exploit in my Furbo pet camera and was able to use code injection to successfully gain root access to the device. This allowed me to execute commands from my terminal to view the live stream and perform functions like tossing a dog treat.
Check it out on Github!OpenAI Steganography
Used OpenAi's DALL-E API to generate images for steganography encoding/decoding. Built a python app using Flask to allow a user to enter a prompt to generate an image using DALL-E's API, or upload their own image and enter a secret message. The secret message will then be encoded into the image using LSB steganography and will be displayed next to the original image to ensure it is not discernable. Also has functionality for decoding a steganographic message with options for Caesar and Vigenere Cipher.
Check it out on Github!
Platformer Game
A short 2D platformer video game written in Java about the style of leadership I take when I am in a team-oriented work environment. This opportunity was given to me by my LEAD-100 professor who encouraged us to be different and submit something other than the standard essay for our final paper. My choice was to write a game because learning new techniques and developing my skills is what I enjoy most.
Check it out on Github!