Adam P. Email & Phone Number

Palo Alto, Ca, Us

* Some Backend Engineering* Some Frontend Engineering* Some DevSecOps Engineering* Some Infrastructure Engineering* Copious amounts of anti-Bot, Security for Corp, Infra, Prod, Compliance, and Risk* Collaborating and leading through others.

Palo Alto, Ca, Us

Seattle, Wa, Us

Foster City, California, Us

Accomplishments:1. Developed and ran a service that scanned for reported phishing attacks leveraging the platform.2. Leveraged data science to extract key terms for anti-spam and suspect content. |-> Created a labeled data set to help bootstrap supervised machine learning and classification.3. Developed and ran an anti-spam service using key terms found in suspect content. 4. Advised on security, trust and safety issues.5. Architected and negotiated a set of solutions to help secure the corporate infrastructure (e.g. EDR/MDR, workforce identity, anti-phishing, email leak prevention)6. Hunted and/or investigated suspicious activity targeting employees or leveraging the platform.7. Worked with threat intelligence community to help protect the platform.

San Mateo, California, Us

Operating across several major pillars of business to meet the needs of our community and the business.== Security Leadership ==Collaborate with the team to build a framework, roadmaps and metrics to measure security. Mentor peers and junior engineers. Source and interview future team members. == Cloud Security Strategy and Implementation ==Define, establish, and lead the cloud security strategy to improve continuous monitoring, security and visibility in third party clouds. == Security Education and Training ==Develop, lead, scale and teach security education for new hire orientation, software engineering and security development lifecycle. Create and present relevant security to talks to help educate and protect the community.== Data Lifecycle Security ==Collaborate with cross functional teams to define defense-in-depth programs and practices for securing Roblox data from the endpoint to its cold storage.== Security Operations, Threat Intel and Outreach ==Collaborate, investigate and research active incidents and threats that target and exploit players. Provide actionable intelligence to help defend the platform and respond to malicious activities. Define the TI program and success metrics. == Vendor Risk and Bug Bounty Programs ==Help manage vendor and supply chain risk with regular reviews and outreach. Negotiate and compromise on appropriate security postures to reduce business risk and exposure. Help the team respond to inbound bug bounty reports. Validate risk, identify relevant stakeholders, and work to address vulnerabilities found by the community.== Product Security and Security Development Lifecycle ==Assist and advise on product selection and the implementation of automated testing (SAST/DAST), source code analysis and vulnerability scanning using frameworks from OWASP and MITRE. Co-lead and guide risk assessments and threat models to help improve product security and user privacy. Help establish a product security program.

San Jose, Ca, Us

Develop tools and applications that integrate with Enterprise authentication, Splunk, 3rd party tools/vendors like RecordedFuture, ThreatGrid, ThreatQ, and other internal services. Investigate and manage incidents to help reduce Cisco's risk exposure. Develop new processes like monitoring and investigating newly registered domains for potential phishing threats, internal policy violations, or customer threats. Advise on internal engineering projects.

San Jose, Ca, Us

Proto-typed and developed a scalable Docker+Python platform leveraging opensource intelligence from sources like Twitter. The artifacts are used for hunting and measuring efficacy. Hunt for threat actors using Umbrella investigate and share intelligence with other Cisco teams. Investigate and respond to customer queries about potentially malicious domains. Work on a variety of projects to help improve product coverage and threat awareness.

Operating as a consultant has allowed me to freely work in multiple sectors and disciplines. I have worked with startups, non-profits, the government sector, and Fortune 50 clients in varying roles. Network Engineering and Architecture Projects► Design and implemented a small office infrastructure supporting office applications. ► Implemented security (firewall rules) and infrastructure (VLANS) access controls to segment the production, recreational, and hostile networking environments. ► Implemented a small private cloud for experiments, testing, and analysis. ► Designed, tested, and implemented networks for monitoring, surveillance, and physical automation. ► Prototyped and developed internal applications to help facilitate network security and asset management.Recent Security Project Highlights:► Malware and Network Forensics► Infrastructure Review► Policy Creation► Penetration Testing and AuditsVendor tools that I have experience with:► IDAPro► CrowdStrike► Tanium► Cisco Investigate► FireEye Malware Analysis Sandbox► RSA : Security Analytics► Splunk► Recorded Future► Swimlane (developed custom packages and apps)► ThreatConnect► Phantom (developed custom packages)► Custom security automation and orchestration deployments based on vendor tools► Custom threat feed consumption, IOC filtering/management, and continuous monitoring

New York, Ny, Us

Simply put, I try to make my teams life easier. I split my time between threat hunting, research, and internal tool development. First, I perform data and telemetry analysis to help identify threats in the environment. Second, I research some of the latest trends and attacks and try to find them in our environment. Finally, I develop internal tools that enrich data from a number of third party applications and tools in addition to some services with no official API (go-go Python HTML Scraping). The tools operate independently or as a network service and they help automate our detection and response process.

Houston, Tx, Us

As a graduate student at Rice, I helped in a number of different research projects. Some were failures, and some were not. Here are the highlights:= Developed and released open source software (OSS) and extensions to popular OSS.= Built a scalable system using Java, Python, MongoDB, and Tor to detect censorship in social networking sites. = Helped scale Android application analysis looking for permission creep and malicious behavior. = Built an orchestration and virtualization test bed to measure latent secrets in the HotSpot JVM. = Fixed insecure GC implementations and added memory sanitization, removing latent secrets in the HotSpot JVM. = Developed a memory analysis framework targeting the JVM. = Applied machine learning in several projects aimed at classifying file types, classifying executable binary blobs and categorizing/classifying network traffic. = Developed labs and assisted with teaching information security courses.

Burlington, Massachusetts, Us

In this position, my primary job duty was to reverse engineer malware written in C/C++, Visual Basic, Java, and .Net to determine how it functions and behaves. In addition to my RE effort, I also developed and prototyped scripts and tools for software and protocol analysis that improved the efficiency of the analysis process. Furthermore, I helped define a methodology for reverse engineering and analyzing malware written in Java. I also shared my expertise through a series of technical talks related to programming, reverse engineering, and malware analysis techniques. I also participated in ad-hoc information sharing sessions when team members or I were stumped.

Austin, Tx, Us

In this position, I am in charge of managing the research direction of the company and establishing strategic research initiatives, guidelines, and procedures. As part of this role, I also serve as a mentor for employees who wish to perform research. Additionally, I perform project execution on a variety of engagements such as web application testing, software security and threat modeling, penetration testing and vulnerability scanning and verification.

Austin, Tx, Us

As a Principal for Praetorian, I performed internal, external, and application penetration testing on a variety of targets, which ranged from binary clients, thin clients, and web based applications. The role required me to develop custom code and scripts to perform data analysis to enhance the vulnerability assessment process. I also performed software reverse engineering to determine the targets functionality, purpose, and other capabilities of the software in question. During my down time, I would spend time developing Python code for various frameworks and purposes in addition to developing proof of concept tools for research purposes. From time to time, I would also present at various meetings, such as UT-SSE, on topics regarding security.

I performed internal, external, and application penetration testing on a variety of targets, which ranged from binary clients, thin clients, and web based applications. The role required me to develop custom code and scripts to perform data analysis to enhance the vulnerability assessment process. I also performed software reverse engineering to determine the targets functionality, purpose, and other capabilities of the software in question. During my down time, I would spend time developing Python code for various frameworks and purposes in addition to developing proof of concept tools for research purposes. From time to time, I would also present at various meetings, such as UT-SSE, on topics regarding security.

The Woodlands, Tx, Us

Taught programming courses in a classroom and lab environment. Exposed students to the concepts and practices of software development and program analysis. Helped instill critical thinking and problem analysis, so students can decompose complex problems into software solutions. Classes rely on MSDN development tools (programming courses) and Python as a teaching aid (non-programming courses). Languages I taught with VB.Net, Java, C++/C and Python.

As a security consultant for Foundstone, I performed internal, external, and application penetration testing on a variety of targets. I was also engaged with the software security practice where I participated in threat modeling workshops and code reviews, which focused on identifying software design flaws and bugs in business logic along with flaws in the architecture and host configurations. I also presented at a series of ISSA and InfraGard meetings on topics such as threat modeling and virtualization in the enterprise network to professional security organizations. Another job responsibility I held at Foundstone was assisting with courseware development and teaching. Courses I taught included Foundstone’s Ultimate Hacking Expert and Ultimate Web Hacking for BlackHat and other organizations. As far as courseware development, I spent some time weaponizing a kernel escalation exploit and created privilege escalation routines for DLL injection for demonstration purposes. I also designed and created an IR lab set-up based on a modified malware sample, which was dropped by a simple browser exploit.

Austin, Tx, Us

Researched secure methods for moving mobile code from one platform to another. Specifically, I developed a mobile agent system that used a secure manifest, which used cryptographic primitives to protect the integrity and confidentiality of a mobile agents intentions. Additionally, this system used mutual authentication for the agent and the platform, leveraging the hardware TPMs, PKI, and public key cryptography, to ensure agents only executed on the systems for which they were bound or destined to visit. As part of the project, I supervised an undergraduate as she developed supporting application utilities. I was also responsible for administering the lab's Linux machines and main server.

In this position, I spent time integrating database querying and network host resolution functionality into an existing auditing software. The performance of the application was enhanced by storing copies of known and common domain name records locally. My modifications also extended user interfacing functions, providing on-demand network name look-ups using either the database or DNS.

In this role, I evaluated the latest technology network intrusion prevention systems for deployment in the core network of the UT System. The proposed system would be used to offer services to clients of UT System Network Services, so network architecture was also evaluated to enhance the effectiveness of the system and segregate traffic eligible for the service.

Austin, Tx, Us

At 21CT, I researched and developed threat patterns for a Graph Matching Intrusion Detection System. Then I created testbed of systems based on both virtual and physical machines, which was used to test the patterns on network traffic I generated. I also assisted with the development of security related project proposals. Additionally, I performed an assessment and risk analysis on the computer network and provided skeleton corporate policy for developing the future digital technology policies.

In this position, I monitored computer networks for suspicious and malicious activity, and I conducted analysis on various malware samples and created custom signatures to detect the malware. Another responsibility I held in this role inluded the configuration and regular maintenance of host and network intrusion detection systems and signatures.

I performed software testing on their wireless product.

Arlington, Virginia, Us

Performed field operations for combat readiness. Mentored and taught junior soldiers the necessary skills, tactics, and techniques for combat maneuvering. Developed and shared my expertise with team members based on my survey of military literature from areas such as combat engineering, guerilla warfare, counter-terrorism, and signals intelligence.

Phd, Computer Science - Information Security, Networking, And Datamining

Master Of Science, Computer Engineering

Bachelor Of Science, Computer Engineering