Alfredo Ramirez Email & Phone Number

Redmond, Washington, Us

In this role I lead end to end revenue operations strategy for our 100B+ commercial business at Microsoft inclusive of our connected sales and marketing strategy, commercial planning and operations, customer engagement lifecycle and data center expansion commercial strategy for our worldwide commercial business.

Redmond, Washington, Us

In this role I lead the teams responsible for our overall sales model and GTM strategy for our CRM, ERP, Low-Code and AI-driven business process transformation solutions.

Redmond, Washington, Us

Redmond, Washington, Us

I lead the team that defines Microsoft's global business strategy for our Security Solution Area.

Redmond, Washington, Us

I work with customers across geographies and industries to collaborate on security strategies for a cloud-based zero-trust world.

Austin, Tx, Us

• Led a distributed sales team responsible for 10M+ in Annual Sales.• Ran experiments to determine viable avenues for outbound sales growth and balance inbound vs. outbound lead generation. • Personally closed 1.5M in Q1-Q2 of 2018.• Led technical scoping for large and complex projects across corporate and product security.• Managed and delivered several high-value technical projects for enterprise customers in the IoT and application space, from connected lighting to PKI deployment.

Austin, Tx, Us

• Led multiple client-facing security projects across the application and IoT space. Notable projects included an end-to-end assessment of Samsung Artik iOT platform (https://www.praetorian.com/customers/samsung-artik-iot-security-evaluation)• Received a Net Promoter Score (NPS) of 9 or 10 from all customers.• Acted as primary sales engineer for prospective application security projects.

New York, New York, Us

Primary Technologies: golang, scala, spark, amazon s3, rabbitmq, avro, docker, jenkins• Managed a distributed team including team members in Canada and Europe. Balanced managing team while also heavily contributing to a 50+ code repositories across the organization. Led roadmap planning for the team with an eye towards tactical implementation of company's strategic goals, coordinating closely with other managers in the technology division and across the company.• Primary responsibilities consisted of leading team that researched and developed original threat intelligence datasets that were collected non-intrusively and targeted the entire Internet. Collections architecture was fully distributed and built to scale as docker containers, utilizing stateless Golang and Ruby workers that communicated over a message bus (RabbitMQ). • Contributed heavily to establishing an automated CI/CD environment, allowing for dozens of builds and deploys a day, and implemented Jenkins and Github integrations to perform automated testing and linting on builds.• Managed the open-sourcing of several internal libraries as well as contributing to open-source Golang libraries used by the team. • Refactored worker that scans the entire Internet to gather SSL data including certificates and supported protocols. Average scan time per IP dropped from 30 seconds using nmap and openssl to 4 sec in pure Go thanks to a partial re-implementation of TLS that truncates the handshake and minimizes connections. • Co-Designed new collections and ingestion architecture leveraging a schema-first design based on Avro and implemented a schema registry and automation workflow with code generation in Golang and Scala to ensure data integrity across the entire organization.

Boston, Massachusetts, Us

Primary Technologies: burp, nessus, nmap, kali, metasploit, powershell, golang, python, android, ios• Led and participated in dozens of engagements for a variety of clients in the financial, media, medical and telecommunications sectors, among others. Engagements included: network, mobile and application penetration testing, code review, reverse engineering and social engineering.• Performed manual penetration testing leveraging tools such as Nessus and Burp Proxy with an emphasis on understanding customer business rules and manually exploiting them. Very little of the testing process was automated. Additionally, testing occasionally presented constraints such as only having access to what was installed on a customer's workstation; cases like these led to using unconventional tools like Powershell as an important part of certain assessments.• Wrote custom tools in a variety of languages such as Python and Go as part of penetration testing assessments in order to adapt to unique targets and environments. Sample tools included a custom CnC server/client embedded in a customer's environment to avoid IDS detection or antivirus scans and an implementation of a customer-written protocol to exploit weaknesses in its design. • Ongoing research projects on industry-relevant information security topics, including: smart locks and mobile in-app purchases.

Columbia, Md, Us

Primary technologies: nessus, nasl, vmware esx• Researched vulnerabilities across all platforms (Windows, Unix, Embedded Firmware, SCADA, PLC, etc.) to determine availability of fixes, detection methods and exploitability. A wide variety of resources were used, ranging from public vulnerability databases, vendor advisories, buglists, published PoCs and manual review of code to develop detection and exploitation methods for individual vulnerabilities.• Added Nessus support for new platforms including Palo Alto Networks, Fortinet, McAfee, ScreenOS, Countertack, Okta and Huawei. Added the ability for Nessus to detect these platforms and existing vulnerabilities as well as facilitating the easy creation of new plugins for future vulnerabilities via new libraries and plugins..• Designed and implemented a library to store, retrieve and report product installations in a standardized fashion across all plugins. Integrated the library into over 450 legacy plugins via a custom-written parser written in Python. This resulted in a shorter time to write new plugins, less code and fewer bugs per new plugin, effectively improving the overall plugin creation process.• Wrote functional and unit tests (in Python and NASL) for large-scale plugins in order to automate testing against multiple targets and provide 100% code coverage. Many of these tests and test generators were later appropriated by the QA department and incorporated into their workflow, simplifying the QA process and reducing the chance of letting bugs through to production.• Developed NASL plugins for hundreds of vulnerabilities in order to provide detection support in Nessus. Many of these were developed and QAed within 24 hours to meet mission-critical deadlines or contractual requirements.

Dulles, Va, Us

Primary technologies: burp, nessus, metasploit, android, cydia, ios• Areas of responsibility included: Penetration Testing, Source Code Analysis, Reverse Engineering and Threat Modeling. • Developed Android run-time extensions to perform extensive API logging and bypass SSL validation (for Pen Testing purposes) as well as a Dynamic Vulnerability Scanner, among the first of its kind.• Performed multiple assessments (mobile, web, network and physical) for financial institutions and bio-medical companies.• Delivered several company-wide Technical Talks on Cydia Substrate and its applications for Android Penetration Testing.

University Park, Pa, Us

Primary Technologies: php, mysql, jquery• Led team of six (6) developers to create of PHP/MySQL application for event floor management.• Developed software requirements in coordination with customer, designed system architecture, load testing framework, and coordinated activities of development team to meet a hard deadline.• Application maintained 100% availability during 46-hour use period with over 12,000 database transactions.

University Park, Pa, Us

• Tutored students in C++ Programming for Engineers.• Led individual and guided group sessions.

• Designed, budgeted, sourced and deployed industrial control system for $60 Million potato processing plant (>50,000 lbs/hr) to control entire process from raw product receiving to cooking, across five product lines. Collaborated with another engineer to write PLC and SCADA software with RSLogix 5000 and FactoryTalk View.• Developed and deployed PLC and SCADA applications for industrial systems in safety-critical environments. • Designed and supervised deployment of industrial automation and control systems.• Proficient with Rockwell and Mitsubishi products, to include SCADA, PLC and industrial networks.• Provided off-site phone support to customers 24/7 and travelled around the world as needed to provide on-site customer support, troubleshooting, training and perform site commissioning.

Washington, Dc, Us

• Troubleshot and repaired radars and electronic systems valued at over $20 million, employing a variety of test equipment to include oscilloscopes, spectrum analyzers, signal generators, etc. as part of the troubleshooting and testing process.• Supervised up to 6 electronic technicians as crew chief and conducted extensive training.• Acted as technical liaison between maintenance personnel and defense contractors during several dozen DOD Integration/Interoperability Test and Government Acceptance Test events. • Performed packet-level network analysis to troubleshoot proprietary protocols of contracted systems.• Isolated critical bugs in contractor-supplied software, leading to 80% reduction in system downtime after vendor remediation.• Performed Technical Manual validation and verification of the Radar Environmental Simulator for the DOD prior to fielding.