Ana Scolari

As a Lead Software Application Security Engineer, I play a pivotal role in bolstering our organization's defenses against cybersecurity threats. My responsibilities span across collaborating with multiple teams to instill security best practices and ensuring the integration of comprehensive security controls within our secure software development life cycle (SSDLC). I am proficient not only in deploying, but also in actively using critical security tools such as Static Application Security Testing (SAST), Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), Secret Scanning, and Threat Modeling. My role includes scanning, triaging, and automating their use in our Source Code Management (SCM) system, effectively shifting left our security controls to integrate security earlier in the development process. I lead crucial security projects that were instrumental in meeting FedRAMP certification requirements, showcasing my expertise in aligning our security protocols with stringent federal standards. Beyond technical implementations, I contribute to audit and incident reviews, providing expert analysis and recommendations. I also head the Application Security Champions program, fostering a culture of security awareness and skill enhancement across the engineering teams. Additionally, I conduct security brownbags, delivering vital security insights and training to the entire engineering department, thereby empowering them to prioritize and implement robust security practices in their workflows. I am an energetic, passionate, and enthusiastic engineer who loves what I do, consistently communicating with exceptional clarity and effectiveness to drive security initiatives forward.