Daniel Pagán Email & Phone Number

Kirkland, Wa, Us

Redmond, Washington, Us

Working on AI for Windows, Surface, and Edge. More details to come as projects get released!

Redmond, Washington, Us

Redmond, Washington, Us

- Owned a system for generating reputation scores for over 4 million third-party publishers in the Microsoft ecosystem. Flagged around 100 publishers for manual review with more than 50 resulting in true positive malicious intent and suspension from Microsoft storefronts. The system was a first detector in multiple companywide security events. Utilized machine learning and fuzzy matching at scale to produce high quality security signal. Resulted in a US patent.- Built a security copilot using LLMs to provide a natural language interface to security data across the internal Microsoft ecosystem. Served around 190 active sessions month over month that drove active security investigations. - Invented a new way of displaying intermediate AI "thoughts" that helped power users to understand the internal workings of the copilot and to increase trust in AI. Resulted in a US patent.

Redmond, Washington, Us

- Secured Microsoft's supply chain by adding a release pipeline scanner to detect explicit content, PII, and malicious URLs- Integrated with an existing pipeline that handles around 1.4 trillion files per month- Minimized costs to ~$5k per month while still allowing for future scalability using the cloud- Selected to present to EVP leadership

Pittsburgh, Pa, Us

- Fuzzed open-source projects in order to uncover vulnerabilities and set these projects up for continuous fuzzing

Armonk, New York, Ny, Us

- Helped to clearly articulate the root cause of vulnerabilities and helped clients understand the process changes and technical fixes needed to remediate- Founded and led an internal team with the aim of automating offensive security workflows. Resulted in a U.S. patent- Formalized our mainframe penetration testing methodology by serving as deputy of our mainframe concentration- Tested web and mobile platforms, thick clients, and backend server communications. Conducted advanced testing of mainframe bootloaders, hardware/firmware virtualization interfaces, and operating system facilities.

Atlanta, Georgia , Us

- Developed efficient database caching mechanisms for real-time, exploratory workloads- Utilized gaussian mixture models and the composition of partial statistical computations to front load computation on data creation rather than data access

Armonk, New York, Ny, Us

- Hacked a range of systems including backdooring routers, attacking web applications, compromising Active Directory environments, breaking into cloud infrastructure, and physically breaking into target locations- Researched attacks against weak AES key derivation and developed a proof-of-concept tool to brute force these weak keys using techniques from password cracking. This research was presented at DEFCON 27.

Atlanta, Georgia , Us

- Explored optimization options for Windows fuzzing. My focus was on manual DLL injection- Helped to generate and collect data for a research tool that prevented fuzzers from operating efficiently on binaries

Atlanta, Georgia , Us

- Taught the fundamentals of relational database design to fellow undergraduates

Bozeman, Mt, Us

- Taught high school teachers the basics of Python programming in order for them to lead introductory Computer Science courses at their high schools

Master'S Degree, Information Security

Bachelor’S Degree, Computer Science

High School