Independent security consulting.

Senior engineer at the market leader in security threat intelligence.

Professional services and consulting at the market leader in security threat intelligence.

Senior engineer in a company founded by ex-NSA and ex-military experts in mitigating APTs (advanced persistent threats).Responsible for creating a stable, reliable, and high-performance network-based APT infection detection system, capable of finding Zeus, ZeroAccess, et. al.

Senior developer of the Cisco ISE product, specializing in MDM (mobile device management), secure automated endpoint provisioning using RFC 5280 compliant PKI based techniques.Created a secure automated high-performance SSL CA (Certificate Authority) and RA (Registration Authority) for enabling certificate-based authentication by mobile, laptop, and desktop systems.

Create and maintain custom protocol stacks and protocol parsers in Ruby for DNS, SSL, TLS, TLSv1.2, TCP and other key Internet protocols used by NEMs, Telecommunications companies, ISPs, etc. to do fuzz testing and protocol mutation testing on DPI (deep packet inspection) firewalls and other network equipment using the Mu Studio Security solution.Used Intel DPDK (Data Plane Development Kit), Linux, oprofile, et. al. to develop a high performance 10-gigabit-plus network security and performance testing appliance.Find security problems in common open source network applications and report them in security advisories in accordance with industry responsible disclosure practices.Assist customers and support team with prompt resolution of any issues with the operation of the product.

Part of the Mu Dynamics, Inc. team which was acquired by Spirent for US $40 million in April, 2012.Rearchitecting the Mu Studio Security solution from J2EE to Ruby using CouchDB / Couchbase, Redis, ZeroMQ, EventMachine, etc. to improve software currency in the codebase.Create and maintain custom protocol stacks and protocol parsers in Ruby for DNS, SSL, TLS, TLSv1.2, TCP and other key Internet protocols used by NEMs, Telecommunications companies, ISPs, etc. to do fuzz testing and protocol mutation testing on DPI (deep packet inspection) firewalls and other SDN based network equipment using the Mu Studio Security solution.Used Intel DPDK (Data Plane Development Kit), Linux, oprofile / perf, et. al. to develop a high performance 10-gigabit-plus network security and performance testing appliance.Find security problems in common open source network applications and report them in security advisories in accordance with industry responsible disclosure practices.Assist customers and support team with prompt resolution of any issues with the operation of the product.

A member of Yahoo's information security team, with a wide range of job responsibilities in a demanding environment.I am a key subject matter expert on secure networking (network design, network programming and software architecture), vulnerability scanning, network monitoring and management, and agile software development practices and continuous integration.Developer and operator of a custom vulnerability scanning and monitoring system which protected an Internet scale network with 200,000+ devices across multiple continents, finding insecure configurations and ensuring everything complied with company auditing rules (PCI-DSS, best pratices, etc.).Member of a multi departmental network architecture and defense group which worked together to protect against large DoS and DDoS attacks on a carrier class backbone.Main security contact for Yahoo!'s successful participation in the World IPv6 Day. Helped find the right stakeholders for all necessary security audits and approvals and cooperated with researchers to post-process the day's access logs to identify key metrics for presentation to other NANOG members.

Develop network behavior anomaly detection technology for ProCurve Network Immunity Manager. Uses traffic samples to detect security threats based on statistical node behavior baselining. Lead and interact with various research teams inside and outside HP to develop new intellectual property to enhance the capabilities of this product.Apply network programming knowledge to create scalable multi-platform sFlow, SNMP, and Syslog collectors and anomaly analyzers for hundreds of devices and thousands of ports.Integrated third-party UTM, IDS, and IPS devices into ProCurve Network Immunity Manager to create a seamless network security management solution.

Member of an embedded software development team for a UTM (firewall, IPS, VPN, antivirus) stack which runs on a ProCurve switch blade.Provide a broad-based understanding of network security to the development team using detailed understanding of network protocols, security, and competitive products such as Cisco PIX, Sourcefire Snort, et. al.Develop C code to implement RADIUS authentication and other features required in the UTM. Test, debug, profile, and audit implementation to ensure high quality of product.Specialize in maintaining a team test network environment and associated unit tests in Ruby as part of a SCRUM-based agile development approach.

Saved time and money and made the team more productive by creating an improved XML output file validator and multithreaded file processor.Developed accurate, cost-effective solutions to billing problems using Solaris, C, C++, and AWK, as well as Oracle, SQL, and XML.Led the group's development efforts for several cross-department implementations.