Summary
Overview
Work History
Education
Skills
Accomplishments
Certification
QAD President Award
Languages
Timeline
Generic

Boris Hazanov

Cherry Hill,New Jersey

Summary

Electrical and Computer Engineer specializing in cybersecurity engineering. Designs and implements secure systems, manages large-scale security events, and collaborates with cross-functional teams. Proficient in project management, leadership, innovative problem-solving, and strategic communication. Experienced in engineering program management, driving impactful projects from conception to completion while ensuring alignment with organizational goals. Demonstrates a strong focus on collaborative team dynamics and adaptability to evolving requirements. Skilled in project planning, risk management, and process optimization for delivering high-quality results. Diligent [Desired Position] with a proven track record in managing complex engineering programs and delivering impactful results. Leads cross-functional teams to successfully complete high-stakes projects on time and within budget. Demonstrates proficiency in risk management and strategic planning.

Overview

10
10
years of professional experience
1
1
Certification

Work History

Senior Engineering Program Manager

Shopify
11.2021 - Current
  • Company Overview: Trust|Security
  • Running security related programs from ground up, coordinating and communicating with SLT members, creating KPIs, leading vulnerability remediation activity & organization wide security training
  • Manage cross-functional and cross-team cybersecurity projects and programs
  • Coordinate and communicate effectively with SLT, Software Engineers, QA, Product Managers, and other engineering teams to ensure timely and secure product delivery
  • Identify potential issues and provide concise, actionable feedback to project stakeholders
  • Conduct vulnerability assessments and mitigate challenges to safeguard the organization
  • Lead organization wide cybersecurity missions and report back on progress to senior leadership
  • Maintained HackerOne program
  • Trust|Security

Cloud Vulnerability and Risk Management

QAD Inc
02.2018 - 10.2021
  • Developed vulnerability remediation plans for Unix/Linux and Windows servers
  • Communicated with senior leaders to discuss progress, blockers, current organization security posture and future strategies
  • Collaborated with application development teams to address security vulnerabilities
  • Validated and disputed vulnerabilities as part of vulnerability management program
  • Led Centrify access management project (PAM) to enhance system security, deployed privileged access management organization wide
  • Experience driving implementation of security standards such ISO 27001, PCI, SOC2, NIST 800-171, NIST 800-53 or NIST 800-37

Site Reliability Engineer, DevOps

Capital One
02.2017 - 01.2018
  • Worked with fellow engineers to design and build mission-critical distributed systems capable of handling scale and availability demands
  • Drove operational efficiency through capacity planning, performance tuning, and root cause analysis
  • Participated in an on-call rotation to address critical escalations
  • Migrated core Capital One databases and applications to AWS and conducted successful disaster recovery exercises for multiple financial applications

Technical Support Engineer, Cloud Operations

QAD
04.2016 - 02.2017
  • Resolved customer incidents and provided high-quality technical solutions
  • Performed incident troubleshooting and problem analysis as part of the 24x7 Cloud Service Operations Center team
  • Coordinated with senior engineering teams to address unresolved issues and ensure consistent service level objective (SLO) achievements

Associate Technical Support Engineer, Cloud Operations

QAD
03.2015 - 04.2016
  • Resolved support incidents in a timely manner while adhering to Service Level Agreements (SLAs)
  • Retrofitted patches to QAD products as needed to address customer-reported incidents
  • Analyzed, tested, and provided potential solutions to customers, escalating as necessary
  • Documented in detail all analyses and correspondences throughout the issue resolution process
  • Analyze, test, solve problems, advising customers of potential solutions; escalate issues
  • Demonstrate key competencies at the desired levels as defined for this position
  • Document in detail, all analyses and correspondences throughout the issue resolution process; provide proactive status updates to customers

Education

B.S. - Electrical and Computer Engineering

Rutgers University, School of Engineering
New Brunswick, NJ
05.2015

Skills

  • Java,C,SQL,Rails,Python,Linux,Windows
  • Nexpose,BAE,Carbon Black,Falcon,McAfee EPO,Sophos,Centrify
  • AWS,GCP
  • VMware
  • Github
  • Mode/big query
  • Technical project management
  • Software development
  • Stakeholder management
  • Cross-functional team leadership
  • Technical leadership
  • Teamwork
  • Teamwork and collaboration
  • Problem-solving
  • Time management
  • Attention to detail
  • Problem-solving abilities
  • Multitasking
  • Excellent communication
  • Planning and scheduling
  • Organizational skills
  • Active listening
  • Team leadership
  • Effective communication
  • Adaptability and flexibility
  • Decision-making
  • Planning and coordination
  • Task prioritization
  • Self motivation
  • Analytical thinking
  • Scope management
  • Risk assessment
  • Goal setting
  • Conflict resolution
  • Professionalism
  • Strategic planning
  • Time management abilities
  • Continuous improvement
  • Adaptability
  • Written communication
  • Project management
  • Technical understanding
  • Prioritization
  • Problem-solving aptitude
  • Process improvemenCompliance
  • Change management
  • Analytical skills
  • Regulatory compliance
  • Project oversigh

Accomplishments

  • Architecture and implementation of static code analysis as part of continuous deployment for Shopify (~1600 repos)
  • Lead one of six CISO missions, addressing escalations, blockers, SLT status update
  • Implemented a vulnerability management process as part of ISO and PCI requirements
  • AWS certified
  • InfoSec CISSP fundamentals certificate
  • CVSS 4.0 Certificate

Certification

AWS Developer

FIRST CVSS v4.0 Certificate

Scrum Master Certification
Google Chronicle SIEM: Introduction & Single Event Rules
Cybersecurity Leadership and Management Specialization
(ISC)² CISSP Fundamentals

QAD President Award

QAD President's Award as an employee is a significant recognition that typically indicates exceptional performance and contribution to the company. I received this award for reducing the cyber security risk the company had

Languages

English
Full Professional
Russian
Full Professional
Hebrew
Native or Bilingual

Timeline

Senior Engineering Program Manager

Shopify
11.2021 - Current

Cloud Vulnerability and Risk Management

QAD Inc
02.2018 - 10.2021

Site Reliability Engineer, DevOps

Capital One
02.2017 - 01.2018

Technical Support Engineer, Cloud Operations

QAD
04.2016 - 02.2017

Associate Technical Support Engineer, Cloud Operations

QAD
03.2015 - 04.2016

AWS Developer

FIRST CVSS v4.0 Certificate

Scrum Master Certification
Google Chronicle SIEM: Introduction & Single Event Rules
Cybersecurity Leadership and Management Specialization
(ISC)² CISSP Fundamentals

B.S. - Electrical and Computer Engineering

Rutgers University, School of Engineering
Boris Hazanov