Qiang Z. Email and Phone Number

Information security analyst

• Determining and diagramming potential attacks, performed technologies and processes to remediate threats, and continuous security validation • Developing ICS and IoT security solutions on both administrative and technical controls • Responsible for front-end and back-end software security counter-measures and minimize attack surface • System security evaluation, including vulnerability assessment and penetration testing • Responsible for GNU/Linux platform hardening(customizing Kernel, implementing Grsecurity/SELinux, and optimizing services) and tackle key issues, secure coding, code review and refactoring • Middleware security enhancement for native and non-native systems, in-band and out-of-band key exchange, HOTP based certification distribution and authorization • Access control system design, integrated MAC, DAC, RBAC into security daemon and WEB system • Multi-level accounts(system, audit, user) system designing based on Bell-LaPadula Model • HA and autonomy Load balancer products design and development • Level 3(verified design and tested, up to 4) product security testing in National Security Laboratory • Responsible for tri-element peer authentication IP security protocol stack reference design and development • Architect of IP layer security protocol and author of protocol standard draft(National standard) • Responsible for VPN appliance software(Control daemon, Kernel space network driver, authentication protocol and Syslog, etc.) development and integration, source code refactoring and tuning • Security testing tools and participated in VPN simulator development, software, platform security policies and procedures • VPN product design and development, including x86, MIPS multi-core and ARM platforms for different product lines under both agile and plan-driven development methods

• Responsible for VPN Iptables firewall, VPN daemon, Kernel module software design and development • Responsible for PCI cipher kits integrating with VPN server • Responsible for part of WEB CGI system development • Responsible for developing test toolchain, system performance and load testing • Participated in server hardware platform testing and evaluating

• Responsible for operating system integration and new man-machine interface development• Responsible for WAP(wireless application protocol) software development and integration• Assisted in technical support and reference design platform (Philips sysol2 OS) evaluation• Learned wireless application protocols and developed new features for new Philips Sysol2 system