Senior Security Software Engineer
CurrentResearcher for macOS (OS X) portion of microsoft defender in north America. Main Researcher for tamper protection on MacOS to prevent local users from exploiting, disabling, or bypassing our product. Exploited MacOS SIP bypass and presented at DEFCON31. Designed and implemented automated red team attack simulations for MacOS. Reverse engineer and develop signatures for OS X and iOS malwares, viruses, and exploits. Research and manage antivirus design and implementation for a new cross-platform product. Detect and prevent malware and exploit behaviors such as crypto-miners, trojans, persistence, c2 frameworks, and common exploitation frameworks.Developed a tracing tool to assist in reversing malware behavior from a system level using system-extension endpoints on OSX. Research OS internals to guide the developer team for our anti-tampering feature to prevent root users from modifying or uninstalling our product.