Omer Farooq's Location
Washington, District of Columbia, United States, United States
Omer Farooq's Contact Details
Omer Farooq work email
- Valid
- Valid
Omer Farooq personal email
n/a
About Omer Farooq
I've been coding since Windows 3.1 and thrive at the intersection of Security, DevSecOps, Architecture, Tech Strategy, and SecOps. I love tackling challenges around platform scale, digital transformation, identity, security, and generative AI.I can seamlessly switch roles like Solution Architect, Security Expert, CTO, CISO, Cloud GRC Specialist, Software SVP, and even bare metal embedded systems engineer— all in a day's work!Public Speaking - RSA, BSides DC (2016, 2017), BSides San Diego, AWS Events, NAB, InfoMagazine Webinars, Avid Connect, AWS and MS Azure conferences, HPAHands-On Expertise - I'm a hands-on engineer who scales from strategic consulting to C-Suite to hands-on building solutions (Yes, I can code) using K8, Cloud Native Tech, Security, Data Science, AppSec, and App Dev.Certifications: (ISC)2 CISSP, AWS Solution Architect, AWS Security Pro, Azure Security Associate, GCP Associate Cloud (ACE), GCP Professional Cloud, DevSecOps, Cloud Security, Full-Stack SW Dev, Kubernetes K8, SRE, SysOps, DevOps, AppSec, Identity, Data Science & Analytics, GRC (FedRAMP, Risk), DSP, AI/ML, AWS, Azure, GCP. DevOps & SRE - Kubernetes, CI/CD, Ansible SMEPublic Speaker | Expert in Cryptographic (Encryption using AES and AESNI) | SATCOM | Big Data | Analytic | SaaS Applications DevelopmentArchitecture - Designed Azure, GCP, and Azure-based microservice architecture-based SaaS applications for financial, automotive, telecommunication, AI, and robotic applications. First Author for industry-wide guidance for MS Azure and Amazon Web Service for securing hybrid cloud graphics rendering environments.Data Science - GCP and Azure AI/ML, including Cognitive, BigQuery, and Data Fusion Software Engineering - Full-Stack Web Dev with C#, .NET, Python, Java (Spring Boot), Hibernate/Entity Framework, Typescript, Angular 5, and JavaScript. Desktop - .Net/.NET Core, C#, qT, and Mono. Mobile – Android (Java) and iOS (Objective C).Security - Application (OWASP) and Network Assessments, vCISO (strategic and tactical guidance), penetration testing and vulnerability analysis using open-source and custom rootkits, utilities, and scripts as part of red-blue teams (white-hat hacking), code and architect reviews (Microservices architectures that deployed VMs, Dockers, and Kubernetes), SIEM (Splunk, Sentinel), networks (Palo Alto, Cisco, & Meraki), web application assessments using Burp, Acunetix, SolarWinds, and OpenVas.Reverse Engineering- C/C++, JAVA, Android, Windows, and iOS applications, scaling from code to boardroom.
Omer Farooq Work Experience Details
-
Founder And CtoAuxin Security - Auxin.IoCambridge, Ma, Us -
Generative Ai, Ai/Ml Architect, Mlops, And SecurityAuxin.Io - Cybersecurity And Data Science Nov 2022 - PresentI view ML/AI consulting engagements as a mathematical problem first and foremost. My key area is architecting business use cases into an AI/ML deployable, scalable workload. I have supported Fortune 500 companies in refining the AI/ML use-case to mathematical problem framing using algorithms, proof of concept development, data training, Cloud deployment, and AI/ML pipeline creation using MLOps using Azure DevOps and Github tooling. As a Predictive and Generative AI and Machine Learning SME, I designed the workload deployment model that separated the environment based on the training data sensitivity and classification. The system consisted of automated AI/ML model deployment and training using 10TB of data, resulting in complete hand-off deployment in 2 hours instead of 10 days.Designed, architected and developed chatbots, document summary tools, and enterprise-level applications that process multi-modal inputs, use commercial and open-source LLM models and APIs, prompt orchestration, Retrieval-Augmented Generation (RAG), and vector and semantic search to produce rich multi-media-response-output for humans other systems. Created the Jupyter notebooks, Langchain chains, python and Java code to interact with API on serverless compute and cloud architect solutions in Azure and AWS (Bedrock), and built responsible AI technology to measure bias and fairness, drift, duplicates, and missing data relationships. Developed GenAI security controls to ensure data rights, data security, policies and frameworks. I have created the Jupyter notebooks, Langchain chains, python and Java code to interact with API on serverless compute, cloud architect solutions in Azure and AWS (Bedrock), worked vector database, vector search, data anonymization, and test packages in Golang using data-quality to measure bias and fairness, drift, duplicates, and missing data relationships.
-
Vciso Architect ConsultantAuxin.Io - Cybersecurity And Data Science Nov 2021 - PresentSupported multiple CISO offices at Fortune 100 companies and Federal agencies with 100k employees. – Developed Five Year Vision plan for an org with 31.2K retail locations. The plan strategized and created initiatives for security, networking, AI/ML, SecOps, and Secure SDLC, resulting in a realignment of personnel and extended $20M in funding allocation from C-Suite. – Wrote white papers and internal papers on Networking, AI/ML (MLOps), ChatGPT, Vendor Security, and Cloud Security – Architected and Designed hub-spoke upgrade to traditional MLPS network to SD-WAN with SASE and CASB that improved overall reduced threat surface by 65%, increased overall ROI by 156%, and lowered Operation Expense (OpEx)– Designed and Wrote networking architecture that built and extended the Zero Trust pillar by leveraging federated identity and policy engines resulting in a single pane of glass for 1K SecOps team– Architected SD-WAN, Zero Trust Network, SIEM/SOAR solutions for logging monitoring and automated response.– Wrote position paper on AI/ML Ops, including how to leverage foundational large language models and fine-tuned supervised and reinforcement learning techniques
-
Devsecops Architect And EngineerAuxin.Io - Cybersecurity And Data Science Feb 2019 - PresentI have built over twenty (20) DevSecOps Cybersecurity program leading to over 1 million plus finding including critical zero days in third party and custom codebase. Stood up DAST, SAST, Container, IaC and Cloud tools for continuous monitoring and policy based automated detection and remediation. SAST - Used Auxin AlphaScale SAST, Synk, SonarQube to scan code including IAC declarative configurations, codifed DevOp pipelines to detect issues.DAST - Used Auxin AlphaScale DAST, Acunetix, and Rapid7 to perform manual and automated web, mobile and desktop penetration testing. IAC - Used Auxin AlphaScale IAC, Acunetix, and Rapid7 to find over 10K+ issues in configuration code to overall lower deployment costs by 10x. Container - Used Auxin AlphaScale Containers, Palo Alto Defender, and Rapid7 to automate static and run time container issue detection. Cloud - Used Auxin AlphaScale Cloud, Wiz, Lacework, Prisma to detect and codify policies to find misconfiguration, and security issues in deployed cloud environments in AWS, Azure, GCP, Alibaba Cloud and Digital Ocean.
-
Devops - Kubernetes Architect, Security And DeveloperAuxin.Io - Cybersecurity And Data Science Jun 2019 - PresentKubernetes (K8) Architect, developer, and Security engineer. I have helped over 10+ organization architect k8 based solutions from the ground up, migrate from containerized and monolithic applications to K8, and secure their K8 deployments in AKS, ESK, and GKE and hybrid cloud models. • Architecture - Architected and Design solution for ephemeral computing for Vfx rendering, event-driven workloads and Clusters, and batch jobs using Kubernetes clusters, namespaces, and KubeCtl APIs, saving organizations over +10 million in Cloud cost. Review architecture design, manifest, and helm charts. • Migration - Architected the migration from containerization application in AWS ECS and VM-based computing environment to EKS and GKE. The migrated solution increased the scalability and resiliency of the entire system while lowering the operating cost 5x. • Security - Fixed over 10k vulnerabilities in k8 clusters by creating and managing continuous scans as part of the K8 DevSecOps operations. Remediate strategic and tactical issues, including Secrets, Ingress path, and redesigning deployment patterns. Overall the fixes lowered the threat surface area by 78%. Worked with security and K8 teams to deploy service mesh solutions and sidecar containers to increase overall K8 deployment observability.
-
Technical Team LeadAuxin.Io - Cybersecurity And Data Science Aug 2015 - Mar 2024I lead a global team of 25+ engineers, developers, and consulting professionals. We provide our client's security, software development, and cloud architect consulting services. Along with our consulting services, I am the chief technology officer for our industry-pioneering Workload Security Protection Platform, AlphaScale.Auxin Security is a customer mission-focused organization that harvests internal talent to deliver solutions and capabilities that solve a real-world problem through research, products, consulting or services.I founded Auxin Security to provide strategic and hands-on application and cloud security consulting support. Since our inception, we have supported over 60+ including Fortune 500 clients in all verticals. I have led the startup through multiple growth rounds and recently Auxin Security crossed approx. $1.3M in annual revenue milestone and currently we support over eight (8) major clients.
-
Cloud Solution, Network And Data ArchitectAuxin.Io - Cybersecurity And Data Science Jan 2017 - May 2023As a Cloud Solutions, network and Data Architect I provide expert architecture and design for cloud native and hybrid cloud serverless, event-driven, batch data processing, and web applications workloads. – Architected and designed cloud solution that meets shared responsibility and pillars of well-architected solution (Security, Operations, Resiliency, Cost, and performance). My solutions have processed over 100 trillion GB of data in highly secured serverless and event driven workloads, at the same time providing 6.5x cost saving over the off-shelf solutions– Build and Coded Data Storage solutions including storage of high-resolution artifact and collateral from large scale rendering farms. Build a storage pipeline that performed data pre-processing Python and dynamically sorted and stored data in various storage location with active data lifecycles– Architected GitOps solutions to automate the build and delivery of cloud solution using Space Lift, CIrcleCI, Jenkins, Harness, Arog, Flux, and Jellyfish. The automated using Blue/Green and roling update with rollback and backup options, that times saved over 10,000K manhours of engineering hours.
-
Enterprise Data Architect And SecurityAuxin.Io - Cybersecurity And Data Science Jun 2022 - Apr 2023Supported a public trading retailer - Build and design data pipelines for processing data from over 10K stores. Designed data lakes, data shards, and data marts using Google Cloud Platform. Wrote pipelines using Apache Workflow for jobs in Google Bigquery, Apache Spark, and Cloud tooling.
-
Devops & Infrastructure As Code (Iac)Auxin.Io - Cybersecurity And Data Science Aug 2015 - Feb 2023Security (DevSecOps): Performed application and network security assessments, reported strategic (architecture and design) and tactical (implementation, integration) issues, and consulted clients on how to improve overall security posture. Application and system penetration testing (OWSAP xss, injection, crsf) and vulnerability analysis using open-source and custom rootkits and scripts as part of red-blue teams (white-hat hacking). Analyzed various Micro services architectures that deployed VMs, Dockers and Kuebernetes. Reverse engineer multiple commercial and open-source networking product, libraries and software applications. Cloud Computing (AWS, GCP, Azure) -Wrote industry-wide guidance for MS Azure, Google Cloud Platform (GCP) and Amazon Web Service (Hybrid Cloud Compute and Storage farms). Performed security assessments of over 20 GCP, AWS and Azure systems.
-
Enterprise Identity ArchitectAuxin.Io - Cybersecurity And Data Science Mar 2021 - Dec 2022As an identity consultant I have worked on the following project: * Integrated three (3) applications with over 200 million consumers and tied the application to a white-label Microsoft AD B2C identity store backend. The identity-supported user signs up, sign in with MFA and management* Build out API Identity solution using AWS Lambda authorizer and AWS Cognito to support over 12 Billion yearly API calls. The solution utilized industry patterns for support inner and out API Gateways. * Secure identity provider and warehouse for three fortune 50 companies, the effort included * security for transport, replication between warehouses, and identity management* Worked on developing OAuth and OIDC SAML flows on integration for multi-tentant SaaS application – including feature to support multiple SAML provider for a SaaS application with over 1K plus enterprise customers
-
Cloud Security Governance, Risk, And Compliance (Grc)Auxin.Io - Cybersecurity And Data Science Mar 2020 - Dec 2022Security Governance, Risk, and Compliance (GRC) - Provided guidance on data security policies from design, implementation, and governance documentation, vulnerability management and patch management, cloud security and metrics preparation for executive. Supported over 15 organizations in building security programs with specialized DevSecOPs programs based on ISO 27001/27002, NIST SP-800, FedRAMP, CIS, RMF - AAA, DAST, SAST, IAST, threat modeling, encryption, key management, Monitor & Alert, and Audit, High availability, Compliance and Incident Mgmt.
-
Principal Offensive Security AnalystAuxin.Io - Cybersecurity And Data Science Aug 2015 - Dec 2022Offensive Application security for cloud, mobile, embedded, web application. Discovered and reported over 100+ CVE to clients including 10+ Remote Code Execution. Wrote malware to test endpoint security for Linux, Mac OSX, and Windows kernel. Wrote Windows kernel silent malware data exfiltration agent that defeated 98% open source endpoint security solutions.Mobile Security Testing including iOS and Androdi. Create testing methodology for the client, and mentor junior penetration testing team on how to build the program and test effectively. For various client completed over 25 mobile penetration tests leading to over 50+ actual implementation and misconfiguration including Certificate pinning, lack of authentication and OS level mismanagement.
-
Software Supply Chain SecurityAuxin.Io - Cybersecurity And Data Science Jul 2018 - Oct 2022As a software Supply Chain Consultant, I supported multiple clients internal Secure Software Development Processes. – Instituted internal software supply chain firewall using Nessus, and other tools. The internal software supply chain processes reduced over 10K vulnerabilities in over 10M SLOC code leading to saving of 10,000 hours software engineer hours. – Architected software firewalls to protect data, workloads, and applications in environments wherein it is difficult or impossible to deploy physical firewalls, including closed networks, embedded or hypervisors, data centers, container environments, and hybrid and multi-cloud environments
-
Cross Platform Full-Stack Software Developer SmeAuxin.Io - Cybersecurity And Data Science Aug 2015 - Mar 2018Software Developer - BackendWeb application (Golang, Java, python, NodeJS MySQL/Postgress, MangoDB, Angular and typescript). Developed an encryption library in C/C++, ported the software to Linux user, Linux Kernel, Windows users, Windows Kernel using WinDDK, OSx, iOS (objective C), Android, and PowerPC based IBM AIX. Supported and developed software and test for cryptographic FIPS 140 certification. Developed complete build system, CI/CD pipelines, application design & software, and tested applications using custom security, functional and performance test vectors.
-
Author, Conference & Event SpeakerSpeaker Aug 2015 - Present1. AI Security – Conf42, September 20242. AI Security – December 2024 – Warsaw, Poland3. Cloud Native DevOps for LLM and Threat Modeling – December 2024 – Munich, Germany4. Cloud Native DevOps and Threat Modeling – September 2024 – Colorado Springs, Colorado5. Workshop - Cloud Native DevOps for LLM and Threat Modeling – December 2024 – Munich, Germany6. Workshop - Cloud Native DevOps for LLM and Threat Modeling – November 2024 – Berlin, Germany7. Cloud Native DevOps and Threat Modeling – September 2024 – Tampa Bay, Germany8. Microsoft Avid – Studio's webinar series – Cloud Security – June 20219. Third Republic One Forum – Speaker Covid-19 Effect on Digital Security, July 202010. Hollywood Production Association Tech Retreat– Palm Spring, California, February 202011. Hack in the Box (HiTB) Hacking Smart Connected Homes – IoT Village, October 2019, Abu Dhabi, UAE12. ACM SIGGRAPH Birds of a Feather: Living in a Virtual World, August 2019, Los Angeles13. InfoSecurity Webinar - How DNS-Based Attacks Operate from the Inside Out, and How to Defend Against Them 14. Avid Media Connect, Las Vegas NV – March 2019 – Securing Content15. Avid Media, Las Vegas NV – March 2019 – Keynote panel Securing Content with Avid Media CEO and MS Azure16. InfoSecurity Webinar - March 2018 – Ensuring Data Security in Hybrid & Multi-Cloud Environments17. BSides DC 2018 – Securing Multi-Cloud18. DevCon 2018 – Santa Clara, CA - “Securing Cloud-Connected Public Infrastructure IoT”19. AWS Summit, SOHO London, UK – March 2018 – Securing Rendering Farms in the Cloud20. RSA 2017 - IoT Hacking – Breaking Routers21. ToorCon San Deigo 2015: Ashley Madison’s Betrayal - Forensic investigation on how Ashley Madison hack 22. BSides DC 2017: Secure Key Management in the Cloud23. Vice Magazine: Motherboard – Live Hacking Session (Over 99k Views)
-
Founder | EngineerAlphascale Security Jan 2021 - Oct 2024Built the unified risk based DevSecOp platform that includes SIEM, SOAR, SAST, SCA, DAST, Kubernetes, Identity and Cloud Security. Used for over 100 plus projects. -
Founder | EngineerAuxin Ai Jan 2023 - Aug 2024Cost optimization and AI Security platform. Includes an AI Token Exchange for cost optimization, taking advantage of overhead and underutilization, model gateway, and AI DLP solution to prevent data leakage to models. -
Principal Consultant - Security & Cloud Architect, Web & Embedded Sw Dev And Systems EngineerBooz Allen Hamilton Jul 2011 - Aug 2015Mclean, Va, UsFull-Stack Software Development: Designed and implemented server side web services and applications using C# (ASP.NET MVC, Angular, ADO.NET Entity/.NET Framework), JAVA (Spring, JSF), Python (Django) , and cshmtl/razor, AJAX and jQuery. Designed and implemented Restful and Open Data (ODATA) APIs. Designed and implemented server backend micro services using relational DB, REST API, Queues, and security tools. Developed a Micro web service using JAVA. Designed and architected a large scale near real-time data exchange platform and interfaces. Developed a prototype SATCOM control system setup using off-the-shelf components in C/+Databases: Designed and implemented database sachems that supported Near real-time performance, wrote stored procedures/triggers and custom queries for Microsoft SQL DB and Oralce SQL/PL SQL.System Engineering: Designed and architected a Situational Awareness SATCOM control system with spectrum monitoring, end-to-end power control over an over-the-air control (orderwire) spread control channel capabilities. Performed requirement, architecture, traffic analysis and test plan reviews. Used Model-Based System Engineering (MBSE) with SysML/UML processes to build a system model to support system requirements, design and procurement processes. Modeled SATCOM System using System Modeling Language (SySML) to generate system architecture. Hardware Development: Designed an L-Band Satellite communication (SATCOM) modem capable of 10Mpbs full-duplex throughput, QPSK modulation, forward error correction, and timing and carrier recovery. MATLAB : Wrote MATLAB and python modules for simulating SATCOM power control loops and traffic throughput analysis. Simulated and validated the proposed design using MATLAB tools and MBSECo-Authored a “Chain of Custody” paper that led to envelopment of an innovative solution for long-term digital data provenance system and complex “Big Data” using ring-based data encryption algorithms. -
Senior Systems/Software Engineer And Team LeadParker Hannifin Apr 2009 - Jul 2011Cleveland, Oh, UsSoftware Development: Designed, coded, debugged and tested a real-time platform code packages that provided deterministic time and space partitioning similar to ARINC-653 specification using C/C++ using commercial and GNU tool chains. Developed test scripts in Python. Modified and updated filtes, schedule and kernel software. The platform software provides deterministic task scheduling, system modes and time management, Built-in-Test (BITE), health monitoring, communication services (CAN 2.0B, AFDX), and capable of hosting multiple independent Design Assurance Level (DAL) software packages.Team Lead: Led a team of engineers (2-8) through system development life-cycle (requirements, validation, design, implementation, verification) of platform software for Fuel Quantity Measurement System (FQMS) for the Airbus A350 aircraft as per DO-178B process. Interfaced with the customer and senior management to discuss and support status, schedule, risks, and technical reviews. Wrote problem analysis and designed corrective action for various large system issues. Participated in code and system reviews and process improvement committees, and mentored junior team members.Led a team of engineers (2-8) through system development life-cycle (requirements, validation, design, implementation, verification) of platform software for Fuel Quantity Measurement System (FQMS) for the Airbus A350 aircraft as per DO-178B process. System Engineering: In accordance with customer’s specifications, wrote system and software requirements, modeled and validated requirements using SysML/UML and designed software architecture for real-time Avionics software. Validation and Verification: As per DO-178B, guidelines validated and verified system requirements, software design, and source code. Debugged code and tested hardware. Work with test engineers to automate testing. -
Senior Software Engineer - Embedded, Mobile And Web DevelopmentHarris Corporation Jun 2004 - Apr 2009Melbourne, Florida, UsSoftware Development: Designed and developed Board Support Package (BSP) with device drivers, inter-process communication, secure kernel interface, and real-time operating support for various real-time operating systems (RTOS) and hardware using C using GNU tool-chains. Designed and coded object-oriented application software, ported embedded software, and modified existing software using C/C++. Bought up various bare-metal embedded systems and performed extensive board-level software debugging. Developed software and system development completed as per CMMI maturity level-3 process. Wrote software for HAIPE and IPSEC systems in C/C++ on custom hardware and Linux operating systems. Hardware Development: Implemented hardware accelerators as IP cores to assist software in processing Ethernet packets. Designed and implemented Xilinx Microblaze systems using Xilinx FPGAs and tools. System Engineering: Wrote software requirements, integration plans, top level and detail design, and test plan documents for Type-1 systems. Member of process improvement committee (drafted company-wide C/C++ coding standard). Test and Simulation: Developed and designed test environments for measuring performance and latency using commercial and open source tools. Designed and developed verification tools and applications using Java and Tcl/Python/Batch scripts. Team Lead: Led a team of software engineers (2-6) in designing and developing Board Support Packages (BSP) and application software for Software defined Tactical Radios, High-Speed Data Network Encryption devices, HAIPE, Cryptographic applications, and Situational Awareness systems. Collaborated and assisted project managers with labor estimates, software scheduling, and technical white papers. Extensively traveled internationally and domestically to support internal and external customers, software integration, demonstrations, security verification testing and technical meetings.
Omer Farooq Skills
Embedded Software
C
C++
Firmware
Embedded Systems
Python
Program Management
Satcom
C#
Web Services Api
Rf
Radio Communication
Vhdl
Cross Functional Team Leadership
Web Development
Network Security
Asp.net Mvc
Web App
Data Modeling
Data Warehousing
Avionics
Cryptography
Team Leadership
Technical Writing
Restful Webservices
Web Applications
Reverse Engineering
Omer Farooq Education Details
-
University Of Maryland Baltimore CountyElectrical And Computer Engineering -
Rochester Institute Of TechnologyElectrical Engineering
-
Stony Brook UniversityComputer Engineering
Frequently Asked Questions about Omer Farooq
What company does Omer Farooq work for?
Omer Farooq works for Auxin Security - Auxin.io
What is Omer Farooq's role at the current company?
Omer Farooq's current role is Founder and CTO.
What is Omer Farooq's email address?
Omer Farooq's email address is of****@****ris.com
What schools did Omer Farooq attend?
Omer Farooq attended University Of Maryland Baltimore County, Rochester Institute Of Technology, Stony Brook University.
What skills is Omer Farooq known for?
Omer Farooq has skills like Embedded Software, C, C++, Firmware, Embedded Systems, Python, Program Management, Satcom, C#, Web Services Api, Rf, Radio Communication.
Free Chrome Extension
Find emails, phones & company data instantly
Find verified emails from LinkedIn profiles
Get direct phone numbers & mobile contacts
Access company data & employee information
Works directly on LinkedIn - no copy/paste needed
Aero Online
Your AI prospecting assistant
Select data to include:
Total price:
$0.00
0 records × $0.02 per record
Download 750 million emails and 100 million phone numbers
Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.
Start your free trial