Chief Scientist, Cloud Security
Mountain View, California, Us
Led a team of data scientists and software engineers to develop the key data-science products for Symantec CloudSOC, the leading security stack for enterprise cloud applications.Led the design and development of CloudSOC Detect, an advanced anomaly threat-detection engine. It includes detectors that account for time/day, access patterns, data volumes, data content, and other dimensions of behavior. The system is capable of continuous learning, high-fidelity modeling based in behavioral research, and a custom form of multi-level learning that operates on arbitrary distributions at very high speeds for day-0 detections and peer-group comparison.Led the design and development of the algorithms for CloudSOC’s cloud-based DLP system ContentIQ. ContentIQ leverages computational linguistics and a novel contextual-analysis engine to provide best-in-class detection of compliance documents (PII/PCI/HIPAA/…) as well as high-precision detection of challenging document types such as design documents.Designed the machine-learning pipeline for ContentIQ’s machine-learning based document fingerprinting. Several approaches in computational linguistics were needed to allow the user to provide only a handful positive training documents and yet receive high-precision detections.Led the initial design and development of the automation technologies behind CloudSOC StreamIQ. StreamIQ translates network traffic into logs of user actions. The data science team developed a set of human-machine interactive tools backed by machine-learning algorithms. The pipeline significantly increases the rate of CloudSOC cloud-app coverage. It further leverages unsupervised learning techniques to determine when retraining is required.Initiated and guided an effort to develop machine-learned classifiers to aid in the research of cloud application capabilities. Resulted in a significant increase in the breadth and accuracy of coverage.