IoT Exploitation* Adapted shellcode for various IoT devices, leveraging stack overflows and heap pivots against unauthenticated web exploits* Traced low-level boot processes for embedded systems, from bootstrap and bootloader through Linux kernel instantiation* Wrote custom agent communications software in ARM assembly, C, and Python, with encrypted and obfuscated network protocols* Designed and implemented POC command-and-control servers in Python for managing agent installation and behavior* Reversed custom ioctl calls to gain installation superiority over firmware upgradesVulnerability Researcher* Ran embedded packet processing OS in a QEMU virtual machine for vulnerability research and exploit testing* Developed multiple harnesses in C and C++ for honing in on specific weaknesses using Unicorn mode for AFL* Utilized AFL on a large-scale compute platform to find and triage out-of-bound reads and writes, while ignoring unexploitable standard library functions that rely on vector operations* Reverse engineered details of event dispatch loops in a multi-user Ghidra environment, using custom scripts to highlight AFL code block coverage* Analyzed protocol exchanges across several attack surfaces using Wireshark and gdb for dynamic reverse engineering* Created POCs for bounded heap overwrites and other attacks using Scapy and custom Python codeTelecom Applications Development* Deputy Team Lead on telecommunication router development effort, focused on research and next-generation products* Reverse engineered executable patching format, delivering Ghidra plugin and script enhancements to read patches and modules for static analysis* Planned and executed porting effort for major new vendor product version; directed team in updating software and unified versioning directory structure to allow parallel version builds

Telematics Research* Security and vulnerability analyst focusing on telematics systems* Principal reverse engineer, scrutinizing telematics applications with Ghidra* Designer of communications protocols for Ruby-on-Rails applications* Leader of small form factor device prototyping effort for technology demonstrationsSoftware Reversing* Team member on Ghidra, a Software Reverse Engineering platform developed at NSA* Maintainer of software processor models including ARM, x86, SPARC, MIPS, PowerPC and 680x0 variants* Developer for several Ghidra binary loader formats, including ELF, Mach-O, PE, COFF, and raw binary* Architect for most of the correlation engines used in the Version Tracking feature of Ghidra* Designer of the Java and ANTLR-based domain specific language compiler used for translating software processor models into code for use in Ghidra and its Decompiler

Scientific Visualization* Project technical lead for Waveform Viewer Tool (WVT).* Managed tactical assignments for team members, training for new personnel, and supervised semi-XP agile development methodology.* Interfaced directly with end-users and product representatives to prioritize new features, bugs, and external tool integration, including hosting bi-monthly user group meetings.* Architect for new real-time streaming waveform visualization prototype, including data ingest, signal transformations, and multiple display types.* Principal software consultant providing Java, Perl, C and bash scripts to develop custom advanced signal visualization systems for cognitive studies.

Government IT Development* Led technical team on large-scale enterprise portal application deployed on BEA WebLogic 8.1.* Aggressively tested new features and found early release bugs in WebLogic 8.1 Beta releases.* Designed, coded and tested EJBs and Struts page flows that implemented business logic and customer presentation layers for portlets in the application.* Wrote Perl modules to extract Word HTML form data from personnel evaluations and populate employee review database.Lab Integration Lead* Traveled on a regular basis to Sacramento, CA to support integration builds and operations at subcontractor site.* Configured and maintained network for major customer demonstration with 70+ nodes, 5 Cisco routers and a satellite link back to Baltimore operations site.* Wrote JFC/Swing application to record gisting information and add it to existing Multi-INT database.* Audited and administered computer system security for lab with 20+ workstations.