Katy Winterborn Email & Phone Number

United Kingdom

Manchester, Greater Manchester, Gb

Manchester, Greater Manchester, Gb

Manchester, Greater Manchester, Gb

Responsible for growing the code review and native application practice globally. This includes understanding regional differences and individual challenges, ensuring products meet customer needs and developing and implementing career pathways to ensure consultants have the skills and support required to deliver work of the highest quality.

Manchester, Greater Manchester, Gb

As an experienced technical consultant my role was to lead complex projects and deliver security assessments in a wide variety of technologies and time frames. During this period my focus was on performing complex code reviews and technical due diligence. Alongside this I was able to provide support and mentoring for more junior staff members and operated as local research lead.

Manchester, Greater Manchester, Gb

As a security consultant my role was to perform penetration tests of various systems including application and infrastructure assessments. Alongside this I developed skills in exploit development and released several papers and blog posts on the subject. I also started teaching x86 fundamentals and exploit development as well as taking speaking opportunities on a variety of subjects.

After moving into a consultant role, I was responsible for developing training that would allow junior intelligence analysts to pass the CRNIA exam, as an element of penetration testing was required. I also passed my CRT and CISSP exams at this time.I was also responsible for working in a team to deliver a variety of security assessments.

As a network intursion analyst I was responsible for detecting and reporting threats against customer networks.

London, England, Gb

As a member of a small team monitoring a number of major networks, I worked to identify and investigate any attacks against departments of interest. This involved the development and deployment of IDS signatures and on-going analysis to improve our detection capability.A major aspect of my role was liaising with the deeper analysis teams, our response team and various other partners in order to maximise efficiency in detecting attacks and identifying false positives. One example of how working closely with these teams has been beneficial was when I identified a major attack that was initially dismissed as spam, by comparing data gathered internally with information from an industry partner. This allowed an advisory to be issued shortly after the attack was identified and mitigation steps to be taken by all the departments affected.I also assisted in the development of our in-house intrusion detection tool. This initially involved familiarising myself with the software and then identifying areas which didn’t fit the requirements for my team. A large part of this work then involved discussing with potential users how they would like to use the tool, and then feeding this into the development process. The result of this is that the tool has become much more usable and fit for its intended purpose. I was also considered an expert user and became a point of contact across the department for aiding staff in its use by providing training and briefing sessions to help users quickly become proficient.

London, England, Gb

My specific role within the team was as an engineering representative liaising with a large consultancy firm as well as Security, IT Services and other departments in order to meet the challenge of provisioning a working virtual environment within 24 hours.In order to make sure the service met user needs it was necessary to gather user requirements and analyse how these could best be implemented. This was a critical role, and my task was to identify key users and meet with them. The purpose of these meetings was to discuss what service they would like to see us provide in an ideal world.As I was working within a multi discipline team from a variety of areas and backgrounds it was vital that the team communicated effectively, which was initially not the case. To rectify this I established several new methods of communication, including a wiki page, a blog and an email distribution list. I also improved on existing methods by analysing a new project management tool and deciding whether it met our needs. I then presented these solutions to the team in the form of a communication plan in order to make sure everyone understood and agreed with the proposal. Before publishing this I ensured that knowledge of the tools was distributed throughout the team, and then assisted team members in the transition.

London, England, Gb

My placement was intended to be spent carrying out performance analysis tests on the implementation of a cryptographic algorithm, however, after an initial phase of familiarising myself with the algorithm and its existing implementation it became apparent that the software was not as complete as originally thought. I was therefore given the responsibility of studying the code to identify and correct errors. Through this I was able to remediate several issues which improved the overall reliability of the algorithm. When it became clear that it would not be possible to complete the initial task within the time allowed by my placement I suggested and implemented an improved method of testing the algorithm in order to assist others working on the project in the future.

London, Gb

During my placement at BAE's Advanced Technology Centre in Filton I was initially given the task of analysing and improving software used by the department for image registration. This involved comparing the in-house software to existing commercial products, identifying differences in functionality and then implementing several key changes, which improved performance and expanded the set of data that could be processed.Following this, I began working within a small team in order to automate the process of capturing images and performing analysis in real-time. Prior to this work processing was carried out offline, which resulted in a significant time delay in producing results. My task was to write software that utilised TCP/IP networking to communicate with the camera and transfer captured images. Before working on this project, I had no previous knowledge of networks and I was required to familiarise myself with the fundamental principles as well as implement the final solution within a short period of time. As my program was also required to interface with software being developed by other team members, this task required a large amount of communication and teamwork.My solution to this problem involved the use of a client/server system in C# that utilised TCP sockets to capture the data produced by the camera, disassemble it, and send it across the network to be reassembled in the correct order ready to be processed. The result of this project was a successful demonstration to the customer at the date originally set.

London, Gb

During my placement at BAE Submarine Solutions my assignment was to write software to automate the process of calibrating multiple nuclear sensors held within a specialised rig. This involved familiarising myself with several concepts, including how to interface with the hardware and the use of the Labview programming language. I tested the solution rigorously, including checking my algorithm with known results, and ensuring it would run overnight.