Paul Rivera Email & Phone Number

San Antonio, Texas, US

• Developed and built Def-Logix, Inc. from start-up with strong, established government contracts, and commercial business.
• Produced 100% of all new business through proposal writing, grant writing, and referrals.
• Hired and supervised all new software engineers, administrative, and support staff.
• Developed and delivered multiple presentations in Washington, D.C. to military, government, and academic cyber security experts and policy makers.
• Principal investigator on a DHS BAA funded project to defend against zero day exploits.
• Managed team of software engineers developing HBSS modules for system information gathering.

New York, NY, US

• Developed Cloudshield applications in RAVE and PacketC focusing on VOIP.
• Subject matter expert in assessing web servers and web applications.
• Tools used were Nessus, Wikto, nmap, metasploit, fping and hping.

• Conducted System Vulnerability Assessments for USAF computer networks.
• Tested and evaluated commercial off the shelf intrusion prevention systems.
• Developed correlation engine/service for customer which mapped customer product events to the SANS Top 20 computer vulnerabilities.

• Assessed network security, developed risk mitigation plans and security policies for HIPAA compliance for various clients (pharmacies and small medical practices).
• Researched and Analyzed vulnerabilities and exploits for network intrusion detection system signature development.
• Developed code to exploit vulnerabilities using C and bash shell scripting. Analyzed results of network captures of various protocol exploits (HTTP, FTP, SMTP, NFS, etc.)

San Jose, California, US

• Developed an Automated Test Framework for the Intrusion Detection Signature Team. The Test Framework validated signature accuracy and tested the signature language capabilities of the intrusion detection engine.

• Team lead on integration of third-party network intrusion detection systems into CIDDS utilizing SYSLOG and SNMP features for Veteran Administration Hospital Networks.
• Researched and tested network protocols and network applications to determine flaws and vulnerabilities.
• Supported management staff with development of proposals and statements of work.
• Installed, configured and managed various intrusion detection systems. ISS Realsecure, Recourse ManHunt, ASIM, Cisco Secure (NetRanger), Dragon and Snort.
• Tested capabilities of COTS IDS in handling evasion techniques.

Master'S Degree, Information Technology/Information Assurance Concentration

Bachelor'S Degree, Computer Science