Dylan Cochran Email & Phone Number

Aberdeen Proving Ground, Maryland, United States

Software Developer at CACI International Inc supporting the US Army C5ISR Center's Defensive Cyber Innovation Branch

Aberdeen Proving Ground, Maryland

Contracted to the US Army’s Cryptographic Modernization Branch to perform hardware and software vulnerability analysis. In this role I was on average given 6-8 weeks with a device or software by the customer, and performed an analysis of the device or software to determine whether it had any vulnerabilities, or to determine its capabilities in a black box scenario.● Static code analysis of COTS (Commercial Off-The-Shelf) and GOTS (Government Off-The-Shelf) software using open source tools such as Ghidra and ILSpy● Live software inspection using emulation and debugging tools.● Performed black box firmware extraction and emulation on qemu.● Black box hardware analysis and exploitation, including writing exploit code in Ruby, Python, C, and C++● Drafted and delivered reports and status updates on each SUT as they were completed.● Worked on an internal hardware project, attended meetings with the downstream customer to determine requirements, attended brainstorming/review meetings, performed research on solutions and reviewed other team members contributions, and performed security control analysis to make sure the design matched customer requirements.● Performed security analysis of components of an autonomous vehicle, including reverse engineering the control protocols, inspecting communications and creating proof of concept attack methods against the vehicle.● Performed RF capture/replay and basic reverse engineering using GNURadio and an Ettus N200 against Tactical Radio and Robotic components● Acted as an early group SME for Post Quantum Cryptography and Cryptography in general to support the Army in its long term(10 year +) modernization strategy. Created prototype (non-production) implementations of LMS-OTS as specified in the CNSA 2.0 as part of a feasibility analysis. Additionally integrated liboqs into test applications to examine key and signature sizes when embedded in RTCP.

Aberdeen, Maryland

Baltimore, Maryland Area

SIMP Console* Created a web-based user interface for the SIMP Enterprise and SIMP Lite products.* Lead a team of developers and designers to build the application from the ground up.* Gathered user feedback from existing customers and turned them into actionable user stories.* Architected and performed senior level development tasks on all components: * A plugin-based REST API backend in Ruby and Golang * A modern SPA based Javascript frontend * A client-side scanning utility in Golang * A set of ruby libraries that are used within Puppet for integration* Implemented mandatory code review and automated testing via GitLab pipelines using Rspec, Jest, Selenium, Cucumber, and BeakerSIMP Enterprise Edition (EE)* Created product offering from the ground up, based on our existing OSS product* Determined initial feature set based on customer requests.* Created roadmaps and initial sprint goals for the first EE release.* Assembled and lead a team to implement the EE feature set.* Wrote most of the underlying compliance engine codebase introduced in EE* Implemented a majority of the Windows platform support.* Implemented the initial implementation of a unified installation/upgrade system.* Created a more coherent CI and build process for components before integration for EE.* Wrote up initial installation and configuration documentation.* Created marketing posts and organized how the release was handled.SIMP Community Edition (CE)* Created HA library (libkv) for use in SIMP and other puppet modules.* Created initial Puppet Enterprise support.Symphony* Worked with a team for the initial marketing drive of the product, including request collection.

Spearheaded and implemented a Puppet Enterprise deployment, and wrote the initial roles and profiles.Wrote and maintain a software auditing platform, that leverages puppet to scan legacy servers for third party web software packages and configuration.Wrote a security vulnerability remediation system to automatically email and then disable websites running out of date software.Created a RabbitMQ based distributed database synchronization system and orchestration application to automate tasks (Jarvis).Built two docker swarm clusters, with VXLAN overlay networking over an encrypted point to point transport between hosts, leveraging RabbitMQ and Consul for service discovery and IPC.Built a centralized log storage system using Elasticsearch, Logstash, and Kibana that runs in the docker container environment and collects request logs from most JHU websites.

Designed a HA puppet environment for company wide use.Wrote and integrated puppet modules to implement core functionality.Wrote an orchestration daemon in ruby that supported multiple plugins and documented an api for use internally with an eye for external api use for driving both Vmware vCloud, Vcenter, and Cisco network infrastructure with a focus on SDDC.Implemented a CI and CD testing and deployment infrastructure for internal services as well as the main company website.Implemented an AMQP based git push deployment bus to send notifications of code changes, and bind a daemon to those messages on the fly, leading to ‘stateless’ app server rollouts.Maintained and troubleshooted php+mysql applications and created custom rulesets for caching and purging the application, apc, and configuring memcached.Maintained and troubleshooted multiple Ruby stacks, with nginx+varnish front end stacks proxying to back end app servers running unicorn and trapperkeeper.Optimized a full stack application to reduce page load time in a reasonable manner without incurring downtime.Maintained and troubleshot an SNMP and probe based monitoring solution (ScienceLogic) including adding manual snmp monitors, auditing thresholds and adding custom monitoring snippets in python.Implemented a Kanban based software development methodology.Implemented a CI infrastructure using gitlab -> jenkins -> jira -> slack for quick notifications of problems in staging.

Developed an in-house imaging solution to replace KACE while integrating with an in-house database.Performed troubleshooting of performance issues with VMWare and iSCSI storage backends.Implemented GIT server and Release Engineering practices for provisioning and puppetImplemented an AMQP Orchestration system for internal use.Wrote puppet modules to implement core functionality.Wrote powershell and bourne shell scripts to bootstrap new images for puppet use.Used vsphere and vcloud director to manage and maintain mutiple VMWare hypervisor environmentsDeployed and installed many physical Dell R420/R720 servers and vms for handoff to customers.

Designed and developed back end management software to create/clone/manage virtual machines using bhyve and leveraging zfs.

Migrated server functionality of a site to a virtual machine environment.Repaired a misconfigured Active Directory infrastructure that had been allowed to split into 3 forks 18 months prior to our companies involvement.Set up and migrated all information from a SBS 2008 installation at one site, to a Server 2008R2 installation at another site, including all exchange information with zero downtime and user reconfiguration.

Administrated 9 Forests varying from 2003 based to 2008 R2 based.Implemented a more consistent administration and software deployment architecture.Managed over 200 users accounts on the varying domains.Ensured users computers operated correctly and efficiently.Applied patches and Group policy across domains to ensure consistency.Worked with Customers to determine software and hardware needs.Repaired computers to ensure consistent and reliable operation.Worked with Remote software to provide quick resolution times.Assisted customers with Data backups and Restores.Successfully performed a 2003 to 2008 forest migration, with 0 downtime.Designed several multi-server setups. including zfs deployments, exchange infrastructure, web server infrastructure with nginx and varnish, erp server installations, and custom sql-based applications

Designed and implemented Software to track expenditures and profits.Repaired computers to ensure consistent and reliable operation.Developed and deployed a small-scale Internet Backup Application.Wrote custom network administration software to fill gaps in third party software holes.

Designed and implemented Software to track expenditures and profits.Repaired computers to ensure consistent and reliable operation.Developed and deployed a small-scale Internet Backup Application.Wrote custom network administration software to fill gaps in third party software holes.