Adrian Kim Email & Phone Number

Redwood City, Ca, Us

Atlanta, Georgia , Us

Mixture of full-time and part-time.CS-6264: Infosec Labs: DefensesMGT 6727: Privacy for Professionals* Topics: US state and federal laws regarding privacy/infosec wrt. specific sectors such as finance, education, medicine, telecommunications and marketing, etc.* Covered relevant laws such as GDPR, CCPA/CPRA, HIPAA, GLBA, and FERPA as well as how they apply to theoretical and real-world scenariosCS 6238: Secure Computer Systems* Topics: hardware-backed memory protections, virtualization, mandatory vs. discretionary access control, authentication, covert channels, distributed systems, database attacks/defenses* Implemented authentication, authorization, and session management of a networked file system à la AWS S3 using Python, MariaDB, and JWT’s; static analysis using bandit; threat modeled my implementation using STRIDECS 6262: Network Security* Topics: security of internet protocols from BGP to DNS to TCP/IP, web applications, malware, internet-scale threat analysis, VM and cloud security, encryption, network monitoring and intrusion detection systems, IDS evasion, rudimentary blockchain/cryptocurrency security* Performed malware analysis of a C2 sample using Cuckoo Sandbox for static analysis as well as symbolic execution and control-flow analysis with angr; performed disassembly and analysis of a malicious Android C2 app with jadx and apktool* Used Wireshark to analyze malicious network traffic and write Snort rules for detection; used machine learning to implement polymorphic blending attacks against a byte frequency-based IDSCS 6747: Advanced Malware Analysis* Analysis of x86-based malware from the WEBC2-GREENCAT family* Manual reverse engineering in Ghidra to enumerate command-and-control capabilities, wrote Python plugins to automate static analysis, used Intel Pin to write dynamic instrumentation toolingCS 6035: Intro to Information SecurityPUBP 6725: Information Security Policies

New York, Ny, Us

* Coordinated SOC 2 Type 2 readiness for an acquisition and mitigated their top 3 operational risks as well as various application and infrastructure security issues, working to align them to the parent company's security practices* Performed design review, code review, and infrastructure review for several engineering projects, including customer account auto-provisioning and flexible RBAC roles for our SPA* Drove the secure implementation of a Kubernetes project for scaling backend analysis queries* Collaborated with ops and engineering to improve on AWS and GCP best practices* Became the security team's touchpoint on GCP security* Worked closely with engineering to resolve security issues surfaced by 3rd party pentests, internal investigations, and HackerOne reports in a timely manner* Performed incident response and remediation for internally leaked or improperly used credentials, potential malware on employee endpoints, AWS and GCP infrastructure alerts, and customer-facing product security response* Delivered onboarding security training for new hires; owned our application security training for new engineering hires and overhauled it for broader, more relevant OWASP top 10 coverage and interactive threat modeling in the context of mParticle's product offerings* Wrote extensive internal-facing documentation, including security's first formalized incident playbooks, code review deep-dives, and research on projects like reinstating a Content Security Policy as well as other security-relevant HTTP headers* Achieved the AWS Security Specialty certification* Reviewed 3rd party vendors and local applications/extensions meant for employee usage on an ad-hoc basis, collaborating with our privacy team as necessary

Ann Arbor, Mi, Us

* Participated in regular on-call rotations for product security response and coordinated PSIRT teams for high-impact security issues, with an emphasis on my ability to provide a great customer experience to security reporters via prompt prioritization and ongoing, transparent communications* Performed longer-term security reviews throughout SDLC for Duo products across all engineering teams (threat modeling, secure design review, manual code review) as well as third-party dependency review on an ad-hoc basis* Presented hands-on, introductory and advanced AppSec training for developers at Duo and Cisco at large for several quarters, teaching them topics from threat modeling to XSS to improper JWT usage* Promoted active knowledge sharing among team members with product security book clubs to better understand the architecture and current security posture of various products and codebases* Leveraged my previous institutional experience as a Duo software engineer to better connect the AppSec team to their engineering peers and their existing processes* Assisted in normalizing data and creating mockups in preparation of moving vulnerability tracking from spreadsheets to an in-house security portal* Created topics and curricula for a Security Champions program, enabling developers to be formally recognized as AppSec Champions and gamifying the process of security knowledge acquisition and awareness

Ann Arbor, Mi, Us

* Actively contributed to several Duo products and features: the Authentication Proxy, Duo Unix, Duo Wordpress, and Active Directory Sync* Developed a deep understanding of RADIUS, LDAP, and the Python Twisted framework while debugging customer-facing issues with technical support, occasionally while on the phone with a customer* Created extensive developer-facing documentation for technical gotchas, tool walkthroughs, and acceptance testing legacy Duo applications* Worked with product management, design, and sales to understand emerging customer needs during and after customer calls* Participated in regular code review, encouraged secure coding practices within my team, and evangelized the use of docstrings to promote better understanding and transparency of opaque codebases* Interacted with the open source community on Duo's GitHub repos and reviewed external pull requests* Presented at R&D-wide meetings on topics such as software design patterns and the usage of SSL libraries* Researched FIPS-140 standards and performed manual and automated code review to identify work needed to enable the AuthProxy's use in FedRAMP-compliant environments* Assisted in creating a support tool for the Authentication Proxy which brought the product down from the top 3 products involved in support escalations to the top 10* Aided in making the Authentication Proxy's logs compatible with SIEM solutions such as Splunk* Helped accelerate development by creating Bash and Ansible scripts for automating Vagrant provisioning on both Windows and Linux environments* Modernized installation of the Authentication Proxy on Linux by moving sysvinit-style scripts to systemd service files* Assisted our internal CI tooling team by writing Ansible plugins to automate setup and teardown of AWS Lambdas and API Gateways in CI environments

Ann Arbor, Michigan, Us

* Expanded capabilities on a lab machine resource monitoring Python script, passing the data between servers with ZeroMQ, writing logging scripts to monitor the programs, and daemonizing the programs to be run continuously on lab machines* Documented setup and potential usage of RancherOS for a container-first student machine environment

Ann Arbor, Mi, Us

* Worked on Duo Insight, a phishing tool intended for use by IT administrators, with React/Redux and Python* Developed a Splunk connector application now publicly hosted on Splunkbase to allow Splunk to ingest Duo logs for visualizing Duo Admin Panel access, API events, and authentication events

Bachelor’S Degree, Computer Science

Master'S Degree, Information Security