Xiaomeng Chang

Email: ady165@r.postjobfree.com, Phone: 540-***-****

Summary

Substantial technical proficiency combined with hands-on analytical expertise, backed by 15 years of development experience within the information technology company;

Advanced SQL skills and extensive experience in data model design, ETL process design/testing, data analysis, data validation across multiple data sources/databases;

Proficient in leveraging BI tools to generate management and analytics reports to support informed decision-making;

Innately self-motivated, disciplined, and enthusiastic about continuous learning and embracing change;

Quickly adapting and thriving in agile work environments;

Strong team player with the capacity to excel independently as well; Education (27 published papers and book chapter)

Ph.D., Dept. of Industrial and Systems Engineering, Option: Management Systems Engineering, Virginia Polytechnic Institute and State University (Virginia Tech), Blacksburg, VA, May, 2008.

M.S.(Non-thesis), Dept. of Industrial and Systems Engineering, Option: Management Systems Engineering, Virginia Polytechnic Institute and State University (Virginia Tech), Blacksburg, VA, May, 2007.

M.S., Control Science and Engineering, Dept. of Automation, Tsinghua University, Beijing, China, July, 2005.

B.E., Automation, Dept. Of Automation, Tsinghua University, Beijing, China, July, 2002. Work Experience

MicroStrategy (2008 – 2023), Tysons, VA 22182

Quality Architect (January 2015-December 2019, October 2020-August 2023) Conduct routine internal security audits, assess the severity, impact, and priority of defects, perform risk analysis, and promptly escalate critical issues to the management team. Provide guidance to the development team to ensure adherence to best practices, and collaborate with internal development teams to resolve issues, track progress, and maintain comprehensive documentation.

Lead on customer escalation security issues, prioritize security features and highlight critical and high severity findings to the executive team and technology department based on real-time monitor and analysis;

Regularly update relevant stakeholders on feature status, progress, and upcoming plans;

Utilize BI tools to generate management and analytics reports for risk management and decision making;

Establish security defects tracking mechanism to monitor the overall security defects status and 3rd party code vulnerabilities, coordinate different departments and fix confirm security vulnerabilities;

Architect and develop automated tools to process security scan results and historical development team responses. This includes data transformation, loading, and alignment with customer findings to ensure swift responses to security concerns;

Design and implement test cases focusing on security aspects such as authentication/authorization modes, deployment verification, operating systems certification, clients, and web certification;

Conduct performance/reliability test and analysis using Jmeter;

Design/implement automation test cases using Selenium;

Maintain internal security platform, apply security tools to scan source codes or debug build for security auditing and Software Composition Analysis (SCA). Tools include Veracode, Checkmarx, Blackduck;

Conduct web application penetration test analysis for MicroStrategy BI platform, work on issues about XSS, CSRF, XXE, SQL injection, etc., coordinate 3rd party penetration test and complete associated follow-up tasks ;

Maintain internal security training platform, organize security training and monitor training progress all over the development teams. Training includes PCI DSS.

Customer Escalation Analyst (January, 2020-September,2020) Support premium customers, solve high priority customer issues and analyze patterns/trends for product improvement.

Prioritize and manage all customer escalation issues within the team, particularly addressing critical security and backend defects promptly;

Conduct comprehensive root cause analysis and troubleshooting for customer escalation cases, focusing on security and backend concerns. This includes areas such as web servers, MicroStrategy Intelligent Server, data query and analytics engines;

Engage in effective communication and coordination with various teams to ensure alignment with customer needs and to implement appropriate solutions;

Offer impact analysis, emphasizing high-risk defects, and provide summarized insights into patterns and trends to facilitate decision-making.

Social media data modeler/analyst project-Team Lead (January, 2013-June, 2014) Team Lead on BI based marketing system, responsible for data model design, ETL process design/testing, data analysis and data validation across multiple data sources/databases.

Gather and analyze business requirements, serving as a liaison between the business and technology teams;

Comprehend data needs and deliver proof of concept solutions;

Develop test cases for data validation and system testing, encompassing the ETL process, relevant APIs, social media products, and BI system dashboards;

Create documentation for requirements, test cases, and impact analysis.

SQL engine- Lead quality engineer (June, 2008-December, 2014) Assure the quality of major features in MicroStrategy BI tools, conduct in-depth analysis to identify root causes, and expertly address intricate customer issues.

Responsible for ensuring the quality of key features involving the relational database and XDA (eXtended Data Access) engine. This includes functions such as Heterogeneous Data Access, Multidimensional Expressions (MDX), Transactions, Direct Schema Loading, Parallel SQL Execution, Incremental Data Transfer, Multiple Cube Engines, Data Import, Datamart, and more;

Perform both manual and automated functional testing activities;

Apply advanced problem-solving skills to diagnose issues, pinpoint root causes, document findings, and collaborate with developers for solutions;

Act as the coordinator for customer issues related to the database, facilitating effective resolution processes. o Evaluate customer cases and distribute tasks across teams and off-shore departments; o Investigate and resolve customer concerns encompassing SQL generation based on requirements, MDX, ETL, database performance tuning, SQL optimization, data types, and more; o Engage with the support team and customers to deliver technical guidance, solutions, workarounds, and recommendations to fulfill customers' reporting requirements.

Extensive proficiency in multiple commercial databases, SQL scripting, ETL processes, and handling heterogeneous data sources. Possess specialized expertise in enterprise data integration and presentation within the MicroStrategy platform;

Comprehensive familiarity with MicroStrategy data modeling and backend components and features, i.e. SQL engine, Analytical Engine, Multiple Cube Engine, VLDB, etc. Skills

Data/system analysis: SQL (for different datasets), XML, Apache Tomcat, MicroStrategy BI Suite, Tableau;

Programming/scripts: Python, C, PHP, ASP, JSP, JavaScript, Html;

Security tools: Veracode, Burp Pro, Checkmarx, Fiddler, Wireshark, Blackduck;

Testing framework/tool: JMeter, Selenium;

Certificates

AWS Certified Cloud Practitioner valid from 9/15/2021 to 9/15/2024

GWAPT (GIAC Web Application Penetration Tester) valid from Nov. 2015 to Nov. 2019

MicroStrategy Certified Engineer

Lean six sigma green belt training certified

Computer Software Copyright

The System of Computer Aided Editor for Composite Engineering Documents V1.0, 2004.9

Contact this candidate