Reddit, Inc.

Leading Reddit's software security team which focuses on AppSec, ProdSec, and a secure by default developer experience.

Head of Software Security

I'm designing and implementing security systems into all facets of Reddit's business. Protecting our company's employees and our website's users is my team's main focus.

Principal Security Architect

Aviso Ventures

Limited Partner

Bank of America

A senior security leader responsible for a large team, focused on Infrastructure Security Testing.
Responsibilities have included:

Management of our Vulnerability Scanning program continuously scanning millions of endpoints and thousands of web applications,
Enterprise Remediation Governance - partnering with our infrastructure owners to remediate vulnerabilities within given SLAs,
Management of our baseline compliance monitoring program, and
Management of our Internet Hygiene and perimeter analysis.

Previously led our cloud, container, and DevOps security programs for a hybrid, multi-cloud architecture.

SVP, Sr Security Manager, Cyber Security Defense

If it's a Cloud, Containerization, or DevOps initiative it's on my desk.

My job to work with all security control owners to operationalize their control in all major public cloud providers and Kubernetes or OpenShift environments.

SVP, Cyber Security Technology - Cloud Security Architect

Liquidmatrix Security Digest

- Write articles about current events in the security world and my personal take on them.
- Host a weekly podcast about current events in the security industry.

Writer & Podcast Co-Host

Goldman Sachs

- One of 3 CISOs of consumer facing divisions at Goldman. (Honest Dollar, Marcus, and GS Bank)

Vice President

Honest Dollar

Acting CISO, built an Information Security program from the ground up at a Financial Tech startup.
- Build secure SDLC, testing, and monitoring around a FinTech application running in Google Cloud on Kubernetes hosting a ReactJS, Go, iOS/Android application and backend financial connections.
- Manage creation and maintenance of policies
- Prove secure foundations during acquisition due diligence by Goldman Sachs

Head of Security [ Acquired by Goldman Sachs NYSE: GS ]

WhiteHat Security

Transitioned out of people management for my last stint at WhiteHat and really focused on industry leadership, sales enablement, content creation, partnership building, and new product launches.

This includes but is not limited to:
- Remediation Assistance & Guidance
- Secure Development Training
- Risk Based Vulnerability Prioritization
- SDLC Architecture Review
- AppSec Program Building
- Asset Discovery

Launched and co-hosted a weekly video podcast, entitled HackerKast, with the Founder of WhiteHat Security, Jeremiah Grossman, and VP of WhiteHat Labs, Robert "RSnake" Hansen.

Director, Security Services & Research

Started and built Whitehat’s first satellite office - focusing on hiring dozens of new security engineers in Houston while maintaining the Silicon Valley SaaS startup culture. Took the team from 0-65+

Hired, trained, and managed the team and helped handle WhiteHat’s exploding customer base which went from a few hundred websites to tens of thousands during this period.

Launched our new product lines beyond our bread and butter web app security testing which included Static Code Analysis and other early development lifecycle integrations to better address the DevOps movement.

Acting figurehead representing WhiteHat Security at many local and national security events presenting on his technical security research as well as emerging threats and trends in the web application security field. (mattjay.github.io/talks)

Sr. Manager, Threat Research Center

- Lead a team of application security testers and engineers

Threat Research Center Supervisor

Web Application penetration tester for the Threat Research Center at WhiteHat Security responsible for identification of security vulnerabilities across tens of thousands of web applications.

Application Security Specialist

San Jose State University

- Taught the web application security section of a undergraduate level class on information security.

Instructor

Adelphi University

- Taught the web application security section of a undergraduate senior seminar on information security.

VerSprite, LLC

Security Consultant

Over the last two decades, I’ve helped make hundreds of organizations more secure.

My mission is to leave the Internet a more secure place than I found it.

I’m helping organizations handle billions of users' information securely and increasing brand’s trust among their customers.

I’m currently the Security Architect of Reddit.

My portfolio:

→ I’m the security architect of Reddit where I help design security into all facets of the business for the 4th largest social network in the US and a top 20 most visited website globally
→ I teach company’s how to protect against cyber attacks and save tens of millions of dollars in losses.
→ I coach entrepreneurs and CISOs that need help with infrastructure, application, cloud, and security policies.
→ I advise early-stage companies in cyber security best practices and help pass technical due diligence from investors and potential acquirers.
→ I invest in early-stage private technology companies focusing on cybersecurity, software infrastructure, employee productivity, and B2B/SaaS.
→ I volunteer for a selection of non-profits who’s missions I connect with who wouldn’t otherwise be able to afford technical and specifically security consulting services..

My results:

→ 50,000k+ applications with less vulnerabilities than when I found them
→ 1B+ users data security reliant on systems I designed or secured
→ $100M+ of startup exits using my security due diligence
→ 0 advertisements or cold calls
→ 100% due diligence success rate

If you want to work with me, get in touch:

Email: mattjohansen@proton.me
Twitter: @mattjay

Matt Johansen

Autodesk

Engaging with customers in data privacy & security, responsible AI, risk and compliance, with transparency and empathy to build trust in Autodesk products, services, and brand.

Director of Customer Trust

Juniper Networks

Led security marketing, install base marketing, and product security (secure portfolio) marketing
- Collateral creation
- Events
- Sales & partner enablement
- Campaigns
- Analysts & influencers
- Juniper Threat Labs
- Competitive intelligence & 3rd party testing
- Led security product launches and the security narrative within networking product launches
- Upsell & cross-sell narrative and campaigns across the entire enterprise portfolio 
- Communicated secure supply chain processes, threat research and secure software development lifecycle processes as differentiators

Sr. Director Enterprise Product Marketing

Responsible for advanced threat security applications product strategy, roadmap prioritization, product line business execution, and product messaging.

Director of Product Management, Advanced Threat

E8 Security (acquired by VMware)

-Product management and product marketing responsibilities, including platform UI requirements, prioritization, and collaborating with engineering

Director, Product

Palo Alto Networks

-Responsible for software subscription (Threat Prevention, URL Filtering, and Wildfire) product marketing and technical marketing
-Managed 3rd party testing engagements for next-generation firewalls, IPS, breach detection/prevention, anti-malware, and advanced threat defense systems
-Prepared submissions for top-tier analyst market guides
-Spoke at multiple industry conferences and panel discussions

Product Marketing Manager, Advanced Threat Prevention

-Responsible for Support strategy and direction of the entire Customer Support department, 
-Managed all technical customer support issues and escalations
-Assisted Marketing and Product Management with campaign launches by providing content and training Customer Support on new products and features
-Wrote customer-facing guides and internal process documentation
-Triaged and solved customer escalations, trained and oversaw other Support Engineers in escalation management
-Created sales collateral and slides for the sales deck related to service delivery

Support Escalation Manager

-Managed a team of 6 Service Onboarding Engineers within the Customer Support Department
-Created the service onboarding program, and continually improved it's structure and workflow to increase customer retention and upsell business
-Defined effective and efficient internal communication and processes between Sales, Legal, TRC, Product Management, and IT
-Managed and resolved customer escalations
-Motivated and worked with my team to provide the best experience for all new customers, including product training and troubleshooting
-Collaborated with IT on Salesforce implementation for effective workflow and needed metrics
-Contributed content and edits to customer-facing documentation

Manager of Service Onboarding

-Onboarded and managed service for enterprise accounts
-Assisted clients in identifying assets (web applications) and WhiteHat service levels best suited for each asset
-Built and managed relationships with clients, acting as their champions within WhiteHat
-Troubleshot technology issues
-Built better processes internally between departments to improve customer service and service delivery 
-Worked with security engineers to effectively communicate web application security information to clients
-Worked with Development and Product Management to improve products, and prioritize and fix bugs
-Identified up-sell and partner opportunities

Technical Account Manager

-Managed client communication and oversaw service delivery for several accounts, small to enterprise companies
-Assisted clients in managing their security strategies
-Responsible for setting up service for new clients and establishing relationships with primary customer contacts
-Worked with in-house sales team on up-sell opportunities
-Trained new clients in interface functionality

Customer Support Engineer

Tiny Prints

-Responsible for training all new employees and retraining staff as procedural standards change
-Contributed to creative design and implementation of new and existing product lines
-Created custom business card designs for PR & Marketing
-Worked in Adobe Illustrator & PhotoShop to customize wedding and everyday stationery
-Consultant for wedding stationery design & etiquette
-Planned and organized philanthropic and volunteer opportunities for the company on behalf of the Tiny Prints Foundation
-Improved overall customer service through the Customer Service Committee

Production Design Team & Design Consultant

My calling is helping people be the best versions of themselves, and though I am by no means perfect, I feel strongly that I do this best my helping organizations protect their data, their customers’ privacy and dignity, and cultivating joy and empathy whenever and wherever I can. When I do work like this, I am exceptionally self-motivated, meticulous, and diligent.

My experience in product management, product marketing, and client management includes machine learning, behavioral analytics, network security, application security, responsible AI, and PSIRT. I love human-centric problem-solving and big ideas, and I value learning opportunities and knowledge sharing.

taplio

The Battle

Matt Johansen

Kate Adam

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?