Daniel U. Email & Phone Number

Woonsocket, Rhode Island, United States

• Planned and executed proof of concept (POC) security testing of all company digital properties in the three major Cloud Service Providers: Azure, AWS, and GCP. Delivered detailed reports and managed findings to.
• Established a cloud security testing program.
• Completed over one hundred individual cloud security engineering projects.
• Authored custom tool to automate cloud security testing.
• Identified and managed remediation/removal of numerous vulnerable cloud hosted servers.

Livonia, Michigan, United States

• Planned, scoped, and executed internal penetration tests of web applications, APIs, and medical devices. Created and maintained high quality deliverables. Coordinated remediation with stakeholders and documented results.
• Completed over six hundred (web application, API, and medical device) security assessments.
• Identified and remediated 50+ vulnerable servers.

Farmington, Michigan, United States

• Developed and implemented security validation strategies (supplier verification testing, fuzz testing, penetration testing) and supported company-wide cyber security initiatives for Uconnect Service Delivery Platform.
• Actively participated in NAFTA Connectivity SDP security development efforts, participated in connected vehicle program security threat modeling, analysis, vulnerability assessment, risk management, and penetration.
• Performed over fifty internal penetration tests on Uconnect SDP and published deliverables.
• Discovered, created Proof of Concept (POC), and reported zero-day vulnerability in ATT Jasper network; affecting all Chrysler connected vehicles.
• Authored automated Bluetooth testing tool for connected vehicles security testing.

Indianapolis, Indiana, United States

• Planned, scoped, and executed enterprise penetration to ensure applicable framework compliance. Published high quality deliverables and consulted during remediations.
• Performed PCI penetration tests for customers in the banking, insurance, retail, and food service industry.
• Provided complete security testing of SCADA (Supervisory Control and Data Acquisition) environments with no impact on operations.
• Detected and assisted in the remediation of a Critical SQL injection vulnerability (SQLi), that, if undetected could have led to millions in lost revenue.