Lorenzo Gallegos

Lorenzo Gallegos

About

Detail

Staff Software Engineer - Security @ Super.com
Colorado, United States

Timeline

work
Job
school
Education
folder
Project

Résumé

Jobs verified_user 0% verified
  • Supercom
    Staff Software Engineer - Security
    Supercom
    Mar 2026 - Current (8 months)
    Super.com is the savings super app for everyday Americans. The app helps customers save across travel, entertainment, financial services, and daily spending. The Super+ membership supercharges the app. Members get 10% cashback on hotels, unlock financial tools like cash advances and credit building, and much more. Since 2016, Super.com has delivered more than $1 billion in savings.

    Secure all the things!
  • Mattermost
    Staff Product Security Engineer
    Mattermost
    May 2024 - Feb 2026 (1 year 10 months)
    Mattermost makes an open core collaboration tool for mission-critical work. The Mattermost platform is completely customizable with chat, dozens of integrations, automation and workflow capabilities, and can be self hosted - allowing customers to own and manage their own data.

    At Mattermost I worked on the Product Security team securing the various software including web, mobile, desktop, API, CI/CD pipelines, and more.

    Responsibilities:
    - Bug bounty program
    - Secure code reviews
    - Security Champions program
    - Conference speaker
    - Training
    - Open source contributions
    - Security automation
    - Security research
    - etc
  • Woodridge Software
    Senior Director of Software Development
    Woodridge Software
    Jun 2022 - Feb 2024 (1 year 9 months)
    Woodridge Software was an award-winning (Inc 5000, Colorado Companies to Watch, Best Places to Work, etc) software development consultancy. Woodridge was acquired by RCG Global Services (now Myridius).

    - Integrate SAST, SCA, secrets detection, linting, IaC scanning, container scanning, and unit tests into continuous integration pipelines
    - Conduct penetration testing and security audits of web, API, mobile, and cloud environments
    - Improve AWS infrastructure security by utilizing services such as WAF, GuardDuty, and KMS
    - Build and improve internal toolkits and project accelerators such as infrastructure as code and CI/CD scripts
    - Implement CloudWatch alarms for the Four Golden Signals using CloudFormation
  • VDA Labs LLC
    Senior Application Security Engineer
    VDA Labs LLC
    Aug 2021 - May 2022 (10 months)
    VDA Labs is a boutique cybersecurity firm offering services such as penetration testing (internal, external, physical, web, mobile, wireless, etc), code auditing, fuzzing, training, and more.

    Responsibilities:
    - Web and API penetration testing
    - Secure code review
    - Mobile penetration testing
    - Cloud security audits
    - Secure SDLC / DevSecOps consulting
    - Reviewing and proofreading security assessment reports of all shapes and sizes
  • Woodridge Software
    Director of Software Development
    Woodridge Software
    Jul 2019 - Aug 2021 (2 years 2 months)
    Developed, architected, and maintained 30+ web, mobile, and cloud products for businesses in a variety of industries (healthcare, FinTech, cybersecurity, education, etc).

    Matured the software development practices of the organization by introducing modern cloud architecture and CI/CD processes into the SDLC.

    Grew the engineering department from 4 to ~35 software engineers, conducted performance reviews, mentored junior developers, developed a training program for new college graduates, and collaborated with lead developers to create a mentorship program for new hires.

    Collaborated with customers, software developers, UX/UI designers, quality assurance engineers, project managers, and executives to ensure pro
  • Woodridge Software
    Senior Software Developer
    Woodridge Software
    Aug 2015 - Jun 2019 (3 years 11 months)
  • Colorado School of Mines
    Adjunct Faculty
    Colorado School of Mines
    Jan 2015 - Dec 2023 (9 years)
    Courses taught:
    - Spring 2015, CSCI 261 Programming Concepts
    - Spring 2018, CSCI 261 Programming Concepts
    - Fall 2023, CSCI 370 Advanced Software Engineering (field session)
  • Woodridge Software
    Software Developer
    Woodridge Software
    Aug 2014 - Jul 2015 (1 year)
  • Colorado School of Mines
    Lead K-12 Outreach Instructor
    Colorado School of Mines
    Aug 2013 - May 2014 (10 months)
    During my final year of undergrad at Colorado School of Mines I was involved with an outreach program to introduce computer science to K-12 students. I held an after school club that exposed 5th-8th graders to topics such as programming fundamentals, cryptography, and boolean logic. I was in charge of all aspects of the course and designed numerous labs using the Scratch programming language, as well as other activities.
  • C
    Instructor
    Center for Bright Kids Inc
    Jun 2013 - Aug 2018 (5 years 3 months)
    Designed and instructed several one-week and two-week long summer courses for gifted and talented K-12 students.
Education verified_user 0% verified
  • Dakota State University
    Master of Science - MS, Cyber Defense
    Dakota State University
    Jan 2021 - Dec 2022 (2 years)
    Gained in depth knowledge into how different areas of an information security program function and work together both from a technical and non-technical perspective.

    DSU is recognized by the NSA as a center of academic excellence in cyber operations (CAE-CO), cyber defense (CAE-CD), and cyber research (CAE-R). They are one of only three universities to achieve all three designations.


    Coursework: wireless security, offensive security, incident response, intrusion detection, computer forensics, managing security risks, etc
  • Dakota State University
    Master of Science - MS, Computer Science
    Dakota State University
    Jan 2016 - Dec 2017 (2 years)
    At DSU I developed a deeper understanding of advanced computer science topics with an emphasis on cyber security.

    DSU is recognized by the NSA as a center of academic excellence in cyber operations (CAE-CO), cyber defense (CAE-CD), and cyber research (CAE-R). They are one of only three universities to achieve all three designations.

    Coursework in cryptography, software exploitation, algorithms, parallel computing, theory of computation, programming language design, etc.
  • Colorado School of Mines
    Bachelor of Science - BS, Computer Science
    Colorado School of Mines
    Jan 2009 - Jan 2014 (5 years 1 month)
    At Mines I developed a love for computer science and software engineering while exposing myself to a variety of classes to help jumpstart my career.

    Coursework in microcontrollers, operating systems, algorithms, database systems, computer networks, web applications, etc.
Projects (professional or personal) verified_user 0% verified
  • O
    Open source software
    Various contributions to open source projects in the cybersecurity community including Checkov, CloudFox, GitHub Workflow Auditor, and Ultimate DevSecOps Library.
This is a community-created genome.