Justin Taft Email & Phone Number

Mountain View, Ca, Us

Mountain View, Ca, Us

- Improved the security of products for Fortune 100 companies and startups. Assessments performed in numerous sectors, such as finance, health, government, analytics, social networking, computer networking equipment, and video gaming industry.- Disclosed Remote Code Execution Vulnerability in Counter Strike via Player Fragging. The Verge and Vice Motherboard covered the research. Authored a reference guide for secure software development, which ranked #1 on Y Combinator's Hacker News.- Performed grey box security assessments with a strong focusing on source code review. Delivered detailed reports explaining vulnerabilities, proof of concepts, recommendations, and secure coding standards. - Performed threat modeling and review of draft protocols. Discovered and wrote exploits for memory corruption vulnerabilities targeting window applications and embedded devices. Performed vulnerability assessments for Web Applications (Java, PHP, Python), Native Applications (C), and Mobile iOS Applications (Swift, Objective-C). Exploited multiple instances of insecure use of cryptographic primitives (CBC Oracle attacks, IV and counter reuse with CTR mode, small key sizes for asymmetric and symmetric cryptography, use of deterministic PRNGs for cryptographic operations, length extension attacks, insecure key management, etc.)- Discovered bypasses in Chrome's/Webkit XSS Auditor and Web Application Firewalls.- Acquires and maintains business by reporting exceptional findings, being thorough, and appreciating all interactions.

Manchester, Greater Manchester, Gb

- Awarded CVE-2016-2067 for finding a privilege escalation vulnerability in a graphics driver effecting multiple android devices. Presented findings at Blackhat Europe 2016.- Assigned Tech Lead on multiple security assessments. Worked directly with clients to develop threat models and disclose vulnerabilities. Authored and proofread assessment reports.- Performed manual source review and augmented penetration testing of mobile, desktop, web applications, and infrastructure. - Fuzzed applications to discover vulnerabilities.- Reverse engineered firmware.

San Diego, California, Us

- Developed high-throughput, horizontally scalable software for processing marketing leads.- Interviewed candidates for software development positions- Wrote meaningful unit,system,functional, and regression tests. Performed code reviews to prevent bugs from entering production.- Optimized SQL queries for better performance by adding indexes and re-writing queries.- Extended Doctrine ORM to work with Redis UNION queries.- Performed white box penetration testing on developed software.

Us

- Architected and lead a small team to develop a order processing service.- Communicated directly with business stake holders. Determined and planned building features which would have highest ROI.- Integrated Sage ERP to handle billing of customers.- Automated generation and printing of artwork for orders.- Created internal HTML5 graphic designer used to design artwork.- Created CRM which tracked the processing of orders, as well as communications between customers. - Developed flexible business rule engine used to trigger various processes (printing, updating of orders, notification, etc.). This resulted in quicker production times for products.

- Architected and developed customer relationship management software, warehouse inventory software, and HTML graphic editor. Responsible for threat modeling and implementing security controls.- Frontend included website for business owners. Android and iPhone app built for customers. - Worked with business stake holders in an agile environment to determine direction of product and development timelines.- Programmed in PHP, Java, HTML, JavaScript, Perl, and Python - Wrote unit, integration, system, and regression tests. - Development languages and tooling includes PHP, HTML, JavaScript, Python, Perl, Mantis Bug Tracker, and git.