Joseph Thomas

Fremont, CA
408-596-4378 M joseph.thomas.bsee@gmail.com
LEADERSHIP PROFILE
12+ years experience in software development test engineering, and customer-facing roles:
Currently serving as Security Program Manager at Veracode Inc., Services | CA-Western Region.
Served as the Technical Program Manager (reporting to the VP of Services) at Shape Security Inc. Recruited to
add value by creating scalable strategic plans, which leverage collaborative relationships and align both
intra/inter-company cross-functional expert teams, singularly focused with ensuring that professional service
engagements deploying the worlds first botwall within customer data centers were successful.
Two years with Riverbed Technology serving as Escalation Engineer for the SteelCentral A/NPM,
NetShark/Packet Analyzer products (primary focus), and the Steelhead WAN Optimization Appliance.
Served 1+ year in Sales | SE U.S. West Coast, Radware, Inc. My product focus was primarily on the L4-7
Alteon ADC and AMS (Attack Mitigation Solution) product portfolios.
Two years with Brocade Communications providing worldwide pre-/post- sales technical support to Brocades
sales teams, OEMs, partners, and end user customers on various L2-3 (XMR, MLX, and CER series) switches
and routers, converged Ethernet Fabric (i.e. Brocade VDX Data Center Switches/VCS fabric technology)
hardware and software products.
Previous five years working cross-functionally in revenue impacting roles - solving real world customer issues
as a Senior Product Deployment Engineer, leading and performing large strategic customer application delivery
controller pre-deployment planning projects, delivering the right technical solutions to enterprise and service
provider customers, from assembling cross functional teams to ensuring that customer experience exceeded
expectations in every deployment. Recovered troubled accounts.
Previous experience also includes hands-on roles in software functionality test, test development, system test,
performance/scalability test, and test automation leveraging the use of Expect, TCL, and Perl within various
Unix/Linux environments.

UNIQUE SKILLS
Organize Solutions: Using technology expertise and deep knowledge of product suites develop unique
solutions, vetting them through internal experts. Provide tailored customer solutions.

Gap-Based Planning: Develop comprehensive planning based on gaps between what is and what is needed.
Identify risks, define strategies and clearly articulate resource requirements, avoiding the risk exposures that
typify over-simplified assumptions.

Rapid Prototyping: Quickly translate customer needs into demonstrated topology designs to verify solutions
match intent. Rally around solutions with creative teams for final deliverables to delight all involved.

Creative Emulation: Emulate customer environment to quickly develop solutions, accelerating deliverables.

PROFESSIONAL EXPERIENCE
VERACODE, Inc., Burlington, MA (Services | Security Program Manager, Western Region) Aug. 2015-Present
Veracode is a market leader in the automated AST (Application Security Testing) services space. The Veracode
platform was designed to be cloud-based from its very inception - not an on-premise Appsec testing solution that
was later simply put in the cloud. Veracodes service offerings follow a SaaS model and cover SAST- Static App
Software Testing, DAST - Dynamic App Software Testing, VAST - (3rd Party) Vendor App Software Testing, PT Penetration Testing, SCA-Software Composition Analysis, WAPM - Web App Perimeter Monitoring, and MARS Mobile App Reputation Services on a single platform without ever requiring source code to execute a scan.
Showing customers how to establish and drive enterprise-wide Appsec risk management programs for application
vulnerability testing. Advise customers on how to best utilize the Veracode platform within their organizations

Page 1 of 4

Joseph Thomas

408-596-4378 M

joseph.thomas.bsee@gmail.com

SDLC process. Assist customers with on boarding of development teams, understanding compilation requirements,
interpreting scan report results, and executing readout calls to drive remediation or mitigation of identified appsec
software flaws. Collaborating with Sales on account strategies and identifying opportunities for account expansion.

SHAPE SECURITY, Inc., Mountain View, CA (Prof. Services |Technical Program Manager) Mar. 2014 July 2015
Shape is a Kleiner Perkins, Norwest, and Google Ventures funded start-up that has successfully launched a
completely new approach to web security.

Reporting to the VP of Services, tasked with laying Shapes foundational groundwork to create a
deployment planning process and program management framework for multiple customer deployments
from essentially nothing. Partner and collaborate with executive and professional services team members to
define and continuously refine how Shape ensures that newly acquired customers ShapeShifter Botwall
data center deployments are successful. Current program management framework is cloud-based and has
scaled concurrent active customer deployments by 700+%.

RIVERBED TECHNOLOGY, Inc., Sunnyvale, CA (Global Engineering Services | Escalation Engr.) 2012 2014
Riverbed ($1B+/Yr) is the leader in Application Performance Infrastructure providing solutions, which allow more
than 24,000+ enterprises, which include 97% of the Fortune 100, and 95% of the Forbes global 100 to successfully
turn location and distance into competitive advantage by intelligently implementing strategic initiatives such as
virtualization, consolidation, cloud computing, and disaster recovery, without fear of compromising performance.

Provide customer escalation and support for customer product issues focusing primarily on the
SteelCentral NetProfiler Application/Network Performance Management (A/NPM), SteelCentral
NetShark/Packet Analyzer products, and secondarily on the SteelHead WAN Optimization Appliance
(both physical and virtual form factors).

The SteelHead WAN Optimization Appliance - Whether a branch office, data center, virtual environment, or
the cloud, the Steelhead provides LAN-like performance and productivity across the WAN.
The SteelCentral NetProfiler and NetShark/Packet Analyzer combine to non-intrusively provide end-to-end
network monitoring, reporting, and analytics from the collection of flow data from network devices, deduplicates and then integrates the flow data with application data from packets to provide a complete real-time
and historical view of application and network performance. Historical data is maintained in a SteelCentral
PostgreSQL database, which can be directly accessed and manipulated from the Scientific Linux shell.

RADWARE, Inc., San Mateo, CA (Sales | Systems Engineer U.S. West/Silicon Valley/S.F. CA) 2011 2012
Radware ($180M+/Yr) is a global leader of application delivery and application security solutions for virtual and
cloud data centers. Radwares award-winning solutions portfolio delivers full resilience for business-critical
applications, maximum IT efficiency, and complete business agility - empowering more than 10,000 enterprise and
carrier customers worldwide to adapt to market challenges quickly, maintain business continuity and achieve
maximum productivity while keeping costs down.
SE for two outbound sales and four inside sales reps. Facilitated the pre-sales process by showing
enterprise and SP customers how to significantly reduce CAPEX & OPEX, improve customer experience
& employee productivity, eliminate the cost of downtime, and enhance business agility by leveraging
industry leading advanced Attack Mitigation System (AMS) and Virtual Application Delivery
Infrastructure (VADI) technology.
Partnered with sales to present and answer technical questions pertaining to Radwares vision &
technologies, strategy, and product road maps to customer prospects at all levels both during customer
facing meetings, via conference calls, and trade-shows.

Page 2 of 4

Joseph Thomas

408-596-4378 M

joseph.thomas.bsee@gmail.com

Assist sales in preparation of proposals and RFIs.

Provided product usability & feature request feedback from customers to engineering.
Provided technical support to customers during PoCs and initial product deployment. Partnered with and
leveraged the Customer Support organization to resolve more severe customer issues post-deployment.
Used Radwares internal Raptor Attack Tools to create prospective customer demos to illustrate
DefensePros ability to mitigate multi-vector attacks which target the various boundaries of a typical
businesss infrastructure (Network, Server, Application Layers): (e.g. UDP/TCP Data Flood, HTTP Flood,
DNS Flood, Overflow & SQL Injection attacks, etc.)

Brocade Communications, Inc., San Jose, CA (Global Services |Technical Support Engineer L2-3) 2009 2011
Brocade ($2.2B+/Yr) is a leading provider of end-to-end, high-performance, reliable, and energy-efficient
networking solutions for the most demanding business requirements, such as consolidation, virtualization, and
business continuity for enterprise data centers, campus networks, and the service provider core.

Disambiguate customer requirements in order to reproduce difficult-to-reproduce customer-found issues in

order to facilitate providing fault isolation and root cause analysis.
Defuse high-level escalations at both the technical and political level.
Leverage my broad internetworking and deployment planning experience to assist major customers with
improving/correcting critical Brocade specific sections within their MOP (Maintenance & Operations
Procedure) documents.
Review technical support bulletins and technical notes.
Collaboratively work with developers, test developers/QA, internal and external customers to drive issues
to resolution.

Citrix Systems, Santa Clara, CA (Deployment Planning | Sr. Product Deployment Engr., Lead) 2005 2009
NetScaler, Santa Clara, CA (Deployment Planning | Product Deployment Engr.) (Acquired by Citrix) 2004 2005
Citrix ($2.5B+/Yr) is a leading provider of enterprise and service provider application network solutions.
As a Lead/Sr. Product Deployment Engineer in the Applications Networking Group (ANG), teamed and
collaborated with other cross-functional staff to strategically & tactically plan deployment testing and proof-ofconcept testing of cutting-edge Citrix-NetScaler application delivery controllers (ADCs), application acceleration,
and application security technology systems to the enterprise and service provider space (e.g. HTTP RFC2616,
Load Balancing applications (Server, Global Server (GSLB/DNS), Transparent Cache Switching), LoadDistribution Methods (round-robin, least connections, weighted distribution, response time), typical deployment
topology modes and features (e.g. 1-arm, 2-arm in-line, HA-High-Availability, DSR-Direct Server Return), RHI
Route Health Injection, SSL, and RTSP services. Cloud Computing, Virtualization, and Clustering concepts as they
pertain to Citrix-NetScaler and XenServer. Used internal and industry standard traffic generation tools (e.g.
BlackWidow, Spirent Avalanche/Reflector (L4-7), and Ixia). Additional highlights include:

Transformed ANGs product deployment planning and proof-of-concept test process: Immediately upon
boarding audited the existing deployment planning process and pulled together key stakeholders to solicit
their views. Revamped process, ensuring ANGs large strategic customers were successful deploying
advanced application delivery platforms within production environment; this process now in wide use.
Overhauled the Google account and transformed how it was managed: Visited Google and engaged with
the Google Corporate Network Czar and key staff to gather information needed to replicate the relevant
portions of Googles data center within the Citrix proof-of-concept test lab. Listened and composed a
thorough list of Googles issues and requirements. Gained significant insight into Googles CitrixNetScaler usage model. Leveraged information gathered to suggest modifications to initial topology in
order to accommodate stated future requirements and scalability needs, as well as understand

Page 3 of 4

Joseph Thomas

408-596-4378 M

joseph.thomas.bsee@gmail.com

meticulous detail regarding the Google traffic mix (including SSL traffic acceleration). Result: Using
Perl productivity enhancement scripts to aide with large and complex configuration, successfully built
and configured an in-house Google lab environment to replicate and drive to resolution all of Googles
reported issues. Used the in-house Google test lab to deliver Google requested demos during their periodic
Citrix site visits and to shape the positive outcomes of all proof-of-concept experiments. Facilitated the
deployment of hundreds of Citrix-NetScaler node pairs in a multilayer, multi-vendor, and highly
available (active-passive) distributed data center network exceeding requirements and providing
extra capacity for upward scalability. Turned around a ready-to-defect key strategic customer. Received
special cash recognition for this singular achievement.
Turned around troubled eBay account by direct intervention: Organized telephone conference calls with a
geographically dispersed eBay account team to clarify repeated customer complaints. Listened and
gathered the information required to isolate the root cause of eBays issues. Drove eBays issues to
resolution and provided customer specific documentation to aide with the Citrix-NetScaler configuration
required to properly interoperate with eBays specific Cisco IOS configuration. Result: Saved the major
account and provided key insights which illuminated how a major customers unique requirements
stretched the supported capabilities of the Citrix-NetScaler product offering. This turnaround became a
model for how to analyze customers situations and for turning around critical accounts.
Averted several major issues with the Citibank account: First teamed-up with SE and India QA team to
provide proof-of-concept test assurance for new Citrix-NetScaler features working and scaling as expected
in a complex Citibank-like environment. Provided periodic status updates to all stakeholders, escalated all
customer-impacting issues and drove open issues to resolution and closure. Provided NetScaler specific
configuration guidelines to interoperate with Ciscos IOS. Result: Obviated showstoppers that would have
impacted Citibank during initial NetScaler deployment, significantly contributing to a smooth product
deployment at Citibank.
Obtained AOL, and EarthLink as key strategic NetScaler customers, using customer-centric entries.
IPv4 vs. IPv4-IPv6 Protocol Translation (IPv6 at back-end) relative performance comparison using Spirent
Avalanche/Reflector L4-7 traffic generator tool. Result: Provided the first ever test &
validation results for IPv6 being supported on the Citrix-NetScaler ADC (Application Delivery Controller)
using an industry standard traffic generation tool.

EDUCATION
MBA (Marketing, Strategic Management), KELLER Graduate School of Management, Fremont Campus
Project & Program Management Certification (PMBoK), UCSC Extension in Silicon Valley, CA
B.S.E.E. (Electronics and Communication Systems), California State University, San Francisco, CA

RECENT COURSES
Strategic Planning, LearniT! (www.learnit.com), San Francisco, CA
VMware vSphere: Configuration & Management v5.x - UCSC Extension, Santa Clara, CA

COMPANY CERTIFICATIONS
Brocade Certified Network Professional (BCNP), License 00FSGYB22NV119TM
Radware Certified Security Specialist (RCSS - DefensePro), Radware Inc., License 1024912741

Page 4 of 4