Rayden C. Email & Phone Number

Mountain View, Ca, Us

I am a senior engineer leading the infrastructure hardening automation program at Google. The program is a cross-functional workgroup of security engineers, software engineers and business risk analysts that design and build Google-scale fleet-wide security assessments, monitoring and remediation. In addition, we:- set the security standards, objectives and controls for infrastructure services at Google- proactively assess, design and augment system architectures to be secure by default, and- build fast and scalable tooling so that security folks can do security.

Cambridge, Ma, Us

New York, New York, Us

Engineered a corporate-wide network threat detection system with actionable signal extraction.▪ It is capable of ingesting all ingress/egress traffic at sustained peak levels (~20 Gbps) at low startup hardware cost (<$8k) and TCO.▪ It is designed to perform on-the-fly in-depth protocol analysis with low output latency (<2s) using zero-copy (DMA) raw packet capture to the deep packet inspection (DPI) engine, which triggers a scripting engine for further analysis as necessary.▪ It is scalable, extensible, and portable, with additional analysis and detection that can be scripted as necessary to be run on-the-fly. Detection is enriched with pluggable intelligence sources.▪ It is integrated with the corporate SIEM solution, where reporting, alerting, and further enrichment with other data sources is performed.Responsibilities performed:▪ Managed the project from start to end as an individual contributor (IC) with regular reporting. ▪ Worked with different stakeholders at every step of the project to ensure that requirements and impacts are wholly considered.▪ Operated well under project budget constraints. ▪ Identified and assessed areas of risk and accounted for them during design and implementation.▪ Ensured HIPAA compliance when handling PHI.▪ Developed a BCP/DR plan for the system and performed DR testing.▪ Released the system as a server-agnostic portable deployment package for additional site deployments in the future.▪ Deployed into production as of Aug 2019.

Founded a freelance digital solutions company providing vCISO services and outsourced IT to small/medium enterprises. Past projects include:▪ Setup and management of email blast cluster (over 100k emails subscribed)▪ Black and grey box security assessments (VA+PT+mitigation)▪ Developing and implementing security strategies▪ Implementing security solutions and custom integrations▪ Migration of applications and infrastructure to a public/hybrid cloud model (with Amazon/Azure)▪ Development of a scalable web application with 2000 concurrent users at maximum load▪ Development of dynamic web sites and custom portals integrated with enterprise applications▪ Regular maintenance of the above

Cupertino, California, Us

The goal of my work was to protect Apple users from all manner of emerging security threats at scale. My responsibilities include:▪ Triage and analysis of malware samples (Intel x86-64 Asm, Static and Dynamic Analysis, Unpacking)▪ Research, design and implementation of software solutions for automated malware detection and remediation (macOS System Programming, Abstract Syntax Trees, Entropy Analysis, Dynamic Time Warping, Graph Difference)▪ Research of malware protection techniques to strengthen threat identification (Anti-evasion techniques for malware, tools for accelerated debugging, Direct Kernel Object Manipulation)▪ Collaborating with other teams to develop novel solutions to problems

Ekaterinburg, Ru

Instructed an intensive curriculum on a practical introduction to modern encryption. Topics covered include:▪ Notions of encryption, randomness, cryptographic security (quantifying/achieving security and generating/protecting keys)▪ Symmetric Crypto: stream ciphers, block ciphers, hash functions, keyed hashing, authenticated encryption (AES-GCM)▪ Hash Functions: SHA, BLAKE2, Keyed Hashing (CMACs), Authenticated Encryption (AESGCM)▪ Asymmetric Crypto: computational complexity of factorization and DLP, RSA, DH, EC▪ Applications: TLS, PGP, PKI Infrastructure and Management▪ Brief overview of the ramifications of Quantum Cryptography, Post-Quantum Cryptography

Singapore, Sg

(Some details omitted in compliance with §5(1)(e)(i) of the Official Secrets Act of Singapore) Primary responsibilities include:▪ Provide support for development and implementation of secure applications for integration with existing software and infrastructure▪ Answer technical portions of requests for proposals and information (RFP/RFI)▪ Educate prospective users on the capabilities of the developed software and conduct live demonstrations on actual use cases of the solutions▪ Identify appropriate technologies to solve problems▪ Represent the team in reporting to senior officers

Singapore, Sg

See description for same role in the period Jun 2017 - Aug 2017.

Singapore, Sg

The objective of my work was to design scalable systems for next-generation multiplayer mobile cloud gaming that provides significantly better game quality and experience at lesser bandwidth that is feasible for 1.5 Mbps cellular data connections. My research culminated in an open-architecture cloud gaming test bed that enables modular use of advanced rendering, media streaming and networking technologies. The test bed served as a common research, development and experiment platform.

Singapore, Sg

(Some details omitted in compliance with §5(1)(e)(i) of the Official Secrets Act of Singapore) The goal of my research was to develop novel techniques to thwart efforts in software reverse engineering on PE32 and MSIL binaries. During the course of R&D, topics such as the following were evaluated with depth:- Advanced Code Obfuscation- Malware Techniques- Reverse Engineering of PE32 and MSIL binaries- Packers, Cryptors, Protectors and Thin VMsThe research culminated in a C/C++ framework that enables instruction-wise on-the-fly encryption/decryption of a chosen code segment in the binary (i.e. only one instruction is valid and executable at any point during execution). Empirical testing showed that there was approximately 30% overhead added to the execution time of the protected code segment.The final solution made use of multiple tricks at various levels of the compiler, debugger and Windows operating system.

Master Of Engineering - Meng, Computer Science And Engineering (Computer Systems, Security)

Bachelor Of Science - Bs, Computer Science And Engineering

Diploma With Merit, Information Security

Computer Systems Networking And Telecommunications

Gce 'O' Level, General Studies