Omer Farooq Email & Phone Number

Cambridge, Ma, Us

I view ML/AI consulting engagements as a mathematical problem first and foremost. My key area is architecting business use cases into an AI/ML deployable, scalable workload. I have supported Fortune 500 companies in refining the AI/ML use-case to mathematical problem framing using algorithms, proof of concept development, data training, Cloud deployment, and AI/ML pipeline creation using MLOps using Azure DevOps and Github tooling. As a Predictive and Generative AI and Machine Learning SME, I designed the workload deployment model that separated the environment based on the training data sensitivity and classification. The system consisted of automated AI/ML model deployment and training using 10TB of data, resulting in complete hand-off deployment in 2 hours instead of 10 days.Designed, architected and developed chatbots, document summary tools, and enterprise-level applications that process multi-modal inputs, use commercial and open-source LLM models and APIs, prompt orchestration, Retrieval-Augmented Generation (RAG), and vector and semantic search to produce rich multi-media-response-output for humans other systems. Created the Jupyter notebooks, Langchain chains, python and Java code to interact with API on serverless compute and cloud architect solutions in Azure and AWS (Bedrock), and built responsible AI technology to measure bias and fairness, drift, duplicates, and missing data relationships. Developed GenAI security controls to ensure data rights, data security, policies and frameworks. I have created the Jupyter notebooks, Langchain chains, python and Java code to interact with API on serverless compute, cloud architect solutions in Azure and AWS (Bedrock), worked vector database, vector search, data anonymization, and test packages in Golang using data-quality to measure bias and fairness, drift, duplicates, and missing data relationships.

Supported multiple CISO offices at Fortune 100 companies and Federal agencies with 100k employees. – Developed Five Year Vision plan for an org with 31.2K retail locations. The plan strategized and created initiatives for security, networking, AI/ML, SecOps, and Secure SDLC, resulting in a realignment of personnel and extended $20M in funding allocation from C-Suite. – Wrote white papers and internal papers on Networking, AI/ML (MLOps), ChatGPT, Vendor Security, and Cloud Security – Architected and Designed hub-spoke upgrade to traditional MLPS network to SD-WAN with SASE and CASB that improved overall reduced threat surface by 65%, increased overall ROI by 156%, and lowered Operation Expense (OpEx)– Designed and Wrote networking architecture that built and extended the Zero Trust pillar by leveraging federated identity and policy engines resulting in a single pane of glass for 1K SecOps team– Architected SD-WAN, Zero Trust Network, SIEM/SOAR solutions for logging monitoring and automated response.– Wrote position paper on AI/ML Ops, including how to leverage foundational large language models and fine-tuned supervised and reinforcement learning techniques

I have built over twenty (20) DevSecOps Cybersecurity program leading to over 1 million plus finding including critical zero days in third party and custom codebase. Stood up DAST, SAST, Container, IaC and Cloud tools for continuous monitoring and policy based automated detection and remediation. SAST - Used Auxin AlphaScale SAST, Synk, SonarQube to scan code including IAC declarative configurations, codifed DevOp pipelines to detect issues.DAST - Used Auxin AlphaScale DAST, Acunetix, and Rapid7 to perform manual and automated web, mobile and desktop penetration testing. IAC - Used Auxin AlphaScale IAC, Acunetix, and Rapid7 to find over 10K+ issues in configuration code to overall lower deployment costs by 10x. Container - Used Auxin AlphaScale Containers, Palo Alto Defender, and Rapid7 to automate static and run time container issue detection. Cloud - Used Auxin AlphaScale Cloud, Wiz, Lacework, Prisma to detect and codify policies to find misconfiguration, and security issues in deployed cloud environments in AWS, Azure, GCP, Alibaba Cloud and Digital Ocean.

Kubernetes (K8) Architect, developer, and Security engineer. I have helped over 10+ organization architect k8 based solutions from the ground up, migrate from containerized and monolithic applications to K8, and secure their K8 deployments in AKS, ESK, and GKE and hybrid cloud models. • Architecture - Architected and Design solution for ephemeral computing for Vfx rendering, event-driven workloads and Clusters, and batch jobs using Kubernetes clusters, namespaces, and KubeCtl APIs, saving organizations over +10 million in Cloud cost. Review architecture design, manifest, and helm charts. • Migration - Architected the migration from containerization application in AWS ECS and VM-based computing environment to EKS and GKE. The migrated solution increased the scalability and resiliency of the entire system while lowering the operating cost 5x. • Security - Fixed over 10k vulnerabilities in k8 clusters by creating and managing continuous scans as part of the K8 DevSecOps operations. Remediate strategic and tactical issues, including Secrets, Ingress path, and redesigning deployment patterns. Overall the fixes lowered the threat surface area by 78%. Worked with security and K8 teams to deploy service mesh solutions and sidecar containers to increase overall K8 deployment observability.

I lead a global team of 25+ engineers, developers, and consulting professionals. We provide our client's security, software development, and cloud architect consulting services. Along with our consulting services, I am the chief technology officer for our industry-pioneering Workload Security Protection Platform, AlphaScale.Auxin Security is a customer mission-focused organization that harvests internal talent to deliver solutions and capabilities that solve a real-world problem through research, products, consulting or services.I founded Auxin Security to provide strategic and hands-on application and cloud security consulting support. Since our inception, we have supported over 60+ including Fortune 500 clients in all verticals. I have led the startup through multiple growth rounds and recently Auxin Security crossed approx. $1.3M in annual revenue milestone and currently we support over eight (8) major clients.

As a Cloud Solutions, network and Data Architect I provide expert architecture and design for cloud native and hybrid cloud serverless, event-driven, batch data processing, and web applications workloads. – Architected and designed cloud solution that meets shared responsibility and pillars of well-architected solution (Security, Operations, Resiliency, Cost, and performance). My solutions have processed over 100 trillion GB of data in highly secured serverless and event driven workloads, at the same time providing 6.5x cost saving over the off-shelf solutions– Build and Coded Data Storage solutions including storage of high-resolution artifact and collateral from large scale rendering farms. Build a storage pipeline that performed data pre-processing Python and dynamically sorted and stored data in various storage location with active data lifecycles– Architected GitOps solutions to automate the build and delivery of cloud solution using Space Lift, CIrcleCI, Jenkins, Harness, Arog, Flux, and Jellyfish. The automated using Blue/Green and roling update with rollback and backup options, that times saved over 10,000K manhours of engineering hours.

Supported a public trading retailer - Build and design data pipelines for processing data from over 10K stores. Designed data lakes, data shards, and data marts using Google Cloud Platform. Wrote pipelines using Apache Workflow for jobs in Google Bigquery, Apache Spark, and Cloud tooling.

Security (DevSecOps): Performed application and network security assessments, reported strategic (architecture and design) and tactical (implementation, integration) issues, and consulted clients on how to improve overall security posture. Application and system penetration testing (OWSAP xss, injection, crsf) and vulnerability analysis using open-source and custom rootkits and scripts as part of red-blue teams (white-hat hacking). Analyzed various Micro services architectures that deployed VMs, Dockers and Kuebernetes. Reverse engineer multiple commercial and open-source networking product, libraries and software applications. Cloud Computing (AWS, GCP, Azure) -Wrote industry-wide guidance for MS Azure, Google Cloud Platform (GCP) and Amazon Web Service (Hybrid Cloud Compute and Storage farms). Performed security assessments of over 20 GCP, AWS and Azure systems.

As an identity consultant I have worked on the following project: * Integrated three (3) applications with over 200 million consumers and tied the application to a white-label Microsoft AD B2C identity store backend. The identity-supported user signs up, sign in with MFA and management* Build out API Identity solution using AWS Lambda authorizer and AWS Cognito to support over 12 Billion yearly API calls. The solution utilized industry patterns for support inner and out API Gateways. * Secure identity provider and warehouse for three fortune 50 companies, the effort included * security for transport, replication between warehouses, and identity management* Worked on developing OAuth and OIDC SAML flows on integration for multi-tentant SaaS application – including feature to support multiple SAML provider for a SaaS application with over 1K plus enterprise customers

Security Governance, Risk, and Compliance (GRC) - Provided guidance on data security policies from design, implementation, and governance documentation, vulnerability management and patch management, cloud security and metrics preparation for executive. Supported over 15 organizations in building security programs with specialized DevSecOPs programs based on ISO 27001/27002, NIST SP-800, FedRAMP, CIS, RMF - AAA, DAST, SAST, IAST, threat modeling, encryption, key management, Monitor & Alert, and Audit, High availability, Compliance and Incident Mgmt.

Offensive Application security for cloud, mobile, embedded, web application. Discovered and reported over 100+ CVE to clients including 10+ Remote Code Execution. Wrote malware to test endpoint security for Linux, Mac OSX, and Windows kernel. Wrote Windows kernel silent malware data exfiltration agent that defeated 98% open source endpoint security solutions.Mobile Security Testing including iOS and Androdi. Create testing methodology for the client, and mentor junior penetration testing team on how to build the program and test effectively. For various client completed over 25 mobile penetration tests leading to over 50+ actual implementation and misconfiguration including Certificate pinning, lack of authentication and OS level mismanagement.

As a software Supply Chain Consultant, I supported multiple clients internal Secure Software Development Processes. – Instituted internal software supply chain firewall using Nessus, and other tools. The internal software supply chain processes reduced over 10K vulnerabilities in over 10M SLOC code leading to saving of 10,000 hours software engineer hours. – Architected software firewalls to protect data, workloads, and applications in environments wherein it is difficult or impossible to deploy physical firewalls, including closed networks, embedded or hypervisors, data centers, container environments, and hybrid and multi-cloud environments

Software Developer - BackendWeb application (Golang, Java, python, NodeJS MySQL/Postgress, MangoDB, Angular and typescript). Developed an encryption library in C/C++, ported the software to Linux user, Linux Kernel, Windows users, Windows Kernel using WinDDK, OSx, iOS (objective C), Android, and PowerPC based IBM AIX. Supported and developed software and test for cryptographic FIPS 140 certification. Developed complete build system, CI/CD pipelines, application design & software, and tested applications using custom security, functional and performance test vectors.

1. AI Security – Conf42, September 20242. AI Security – December 2024 – Warsaw, Poland3. Cloud Native DevOps for LLM and Threat Modeling – December 2024 – Munich, Germany4. Cloud Native DevOps and Threat Modeling – September 2024 – Colorado Springs, Colorado5. Workshop - Cloud Native DevOps for LLM and Threat Modeling – December 2024 – Munich, Germany6. Workshop - Cloud Native DevOps for LLM and Threat Modeling – November 2024 – Berlin, Germany7. Cloud Native DevOps and Threat Modeling – September 2024 – Tampa Bay, Germany8. Microsoft Avid – Studio's webinar series – Cloud Security – June 20219. Third Republic One Forum – Speaker Covid-19 Effect on Digital Security, July 202010. Hollywood Production Association Tech Retreat– Palm Spring, California, February 202011. Hack in the Box (HiTB) Hacking Smart Connected Homes – IoT Village, October 2019, Abu Dhabi, UAE12. ACM SIGGRAPH Birds of a Feather: Living in a Virtual World, August 2019, Los Angeles13. InfoSecurity Webinar - How DNS-Based Attacks Operate from the Inside Out, and How to Defend Against Them 14. Avid Media Connect, Las Vegas NV – March 2019 – Securing Content15. Avid Media, Las Vegas NV – March 2019 – Keynote panel Securing Content with Avid Media CEO and MS Azure16. InfoSecurity Webinar - March 2018 – Ensuring Data Security in Hybrid & Multi-Cloud Environments17. BSides DC 2018 – Securing Multi-Cloud18. DevCon 2018 – Santa Clara, CA - “Securing Cloud-Connected Public Infrastructure IoT”19. AWS Summit, SOHO London, UK – March 2018 – Securing Rendering Farms in the Cloud20. RSA 2017 - IoT Hacking – Breaking Routers21. ToorCon San Deigo 2015: Ashley Madison’s Betrayal - Forensic investigation on how Ashley Madison hack 22. BSides DC 2017: Secure Key Management in the Cloud23. Vice Magazine: Motherboard – Live Hacking Session (Over 99k Views)

Built the unified risk based DevSecOp platform that includes SIEM, SOAR, SAST, SCA, DAST, Kubernetes, Identity and Cloud Security. Used for over 100 plus projects.

Cost optimization and AI Security platform. Includes an AI Token Exchange for cost optimization, taking advantage of overhead and underutilization, model gateway, and AI DLP solution to prevent data leakage to models.

Mclean, Va, Us

Full-Stack Software Development: Designed and implemented server side web services and applications using C# (ASP.NET MVC, Angular, ADO.NET Entity/.NET Framework), JAVA (Spring, JSF), Python (Django) , and cshmtl/razor, AJAX and jQuery. Designed and implemented Restful and Open Data (ODATA) APIs. Designed and implemented server backend micro services using relational DB, REST API, Queues, and security tools. Developed a Micro web service using JAVA. Designed and architected a large scale near real-time data exchange platform and interfaces. Developed a prototype SATCOM control system setup using off-the-shelf components in C/+Databases: Designed and implemented database sachems that supported Near real-time performance, wrote stored procedures/triggers and custom queries for Microsoft SQL DB and Oralce SQL/PL SQL.System Engineering: Designed and architected a Situational Awareness SATCOM control system with spectrum monitoring, end-to-end power control over an over-the-air control (orderwire) spread control channel capabilities. Performed requirement, architecture, traffic analysis and test plan reviews. Used Model-Based System Engineering (MBSE) with SysML/UML processes to build a system model to support system requirements, design and procurement processes. Modeled SATCOM System using System Modeling Language (SySML) to generate system architecture. Hardware Development: Designed an L-Band Satellite communication (SATCOM) modem capable of 10Mpbs full-duplex throughput, QPSK modulation, forward error correction, and timing and carrier recovery. MATLAB : Wrote MATLAB and python modules for simulating SATCOM power control loops and traffic throughput analysis. Simulated and validated the proposed design using MATLAB tools and MBSECo-Authored a “Chain of Custody” paper that led to envelopment of an innovative solution for long-term digital data provenance system and complex “Big Data” using ring-based data encryption algorithms.

Cleveland, Oh, Us

Software Development: Designed, coded, debugged and tested a real-time platform code packages that provided deterministic time and space partitioning similar to ARINC-653 specification using C/C++ using commercial and GNU tool chains. Developed test scripts in Python. Modified and updated filtes, schedule and kernel software. The platform software provides deterministic task scheduling, system modes and time management, Built-in-Test (BITE), health monitoring, communication services (CAN 2.0B, AFDX), and capable of hosting multiple independent Design Assurance Level (DAL) software packages.Team Lead: Led a team of engineers (2-8) through system development life-cycle (requirements, validation, design, implementation, verification) of platform software for Fuel Quantity Measurement System (FQMS) for the Airbus A350 aircraft as per DO-178B process. Interfaced with the customer and senior management to discuss and support status, schedule, risks, and technical reviews. Wrote problem analysis and designed corrective action for various large system issues. Participated in code and system reviews and process improvement committees, and mentored junior team members.Led a team of engineers (2-8) through system development life-cycle (requirements, validation, design, implementation, verification) of platform software for Fuel Quantity Measurement System (FQMS) for the Airbus A350 aircraft as per DO-178B process. System Engineering: In accordance with customer’s specifications, wrote system and software requirements, modeled and validated requirements using SysML/UML and designed software architecture for real-time Avionics software. Validation and Verification: As per DO-178B, guidelines validated and verified system requirements, software design, and source code. Debugged code and tested hardware. Work with test engineers to automate testing.

Melbourne, Florida, Us

Software Development: Designed and developed Board Support Package (BSP) with device drivers, inter-process communication, secure kernel interface, and real-time operating support for various real-time operating systems (RTOS) and hardware using C using GNU tool-chains. Designed and coded object-oriented application software, ported embedded software, and modified existing software using C/C++. Bought up various bare-metal embedded systems and performed extensive board-level software debugging. Developed software and system development completed as per CMMI maturity level-3 process. Wrote software for HAIPE and IPSEC systems in C/C++ on custom hardware and Linux operating systems. Hardware Development: Implemented hardware accelerators as IP cores to assist software in processing Ethernet packets. Designed and implemented Xilinx Microblaze systems using Xilinx FPGAs and tools. System Engineering: Wrote software requirements, integration plans, top level and detail design, and test plan documents for Type-1 systems. Member of process improvement committee (drafted company-wide C/C++ coding standard). Test and Simulation: Developed and designed test environments for measuring performance and latency using commercial and open source tools. Designed and developed verification tools and applications using Java and Tcl/Python/Batch scripts. Team Lead: Led a team of software engineers (2-6) in designing and developing Board Support Packages (BSP) and application software for Software defined Tactical Radios, High-Speed Data Network Encryption devices, HAIPE, Cryptographic applications, and Situational Awareness systems. Collaborated and assisted project managers with labor estimates, software scheduling, and technical white papers. Extensively traveled internationally and domestically to support internal and external customers, software integration, demonstrations, security verification testing and technical meetings.

Doctor Of Philosophy (Ph.D.) - Coursework Completed//Candidate//Abd/Will Not Return, Electrical And Computer Engineering

Master, Electrical Engineering

Bs, Computer Engineering