Raphael Karger Email & Phone Number

Kirkland, WA, US

San Francisco, California, US

Mountain View, CA, US

• Advised startup founders whose companies are working towards addressing the 17 Sustainable Development Goals.
• Provided coaching and guidance on a wide range of topics related to Security. These requests encompass building robust security protocols, developing incident response plans, enhancing cybersecurity awareness and.

Mountain View, CA, US

• Conducted comprehensive security analysis of Google Cloud Platform (GCP) products, identifying critical vulnerabilities across various product classes.
• Leveraged threat intelligence data to uncover and exploit new attack vectors, successfully compromising over 200 high-value production systems on GCP.
• Contributed to developing an internal tool to map potential attack paths within GCP infrastructure, catering specifically to Alphabet's extensive use of GCP services.
• Designed and executed strategic offensive security campaigns, providing leadership and mentorship to team members throughout the initiatives.
• Developed and documented security policies for implementing cloud security products, including VPC-SC, within Google's GCP infrastructure.

Mountain View, CA, US

• Became subject matter expert in cloud database products offered by GCP.
• Ensured the implementation and design of safe architecture within GCP products by consulting various product teams.
• Designed, created, and maintained continuous integration tooling used internally to detect vulnerabilities in code.
• Planned, led, and executed red team exercises to exfiltrate user data. Discovered new exfiltration vectors and web application vulnerabilities in public Google products.
• Conducted design and implementation reviews for products handling user and financial data.

Mountain View, CA, US

• Contributed to developing Golang-based tooling to detect security misconfigurations and vulnerabilities in infrastructure as Code (Terraform).
• Wrote peer-reviewed software design document outlining the development I completed.
• Integrated tool into existing Continuous Integration pipelines andpre-deployment checks.
• Developed the dynamic generation of functions for a library used to convertTerraform resources to cloud metadata. Used Ruby and the Embedded Rubytemplating engine to generate and test entries dynamically.

Tempe, Arizona, US

• Performed source code reviews, network, cloud, and web application penetration tests.
• Built internal scripts, tools, and methodologies.
• Developed comprehensive and accurate reports along with presentations for both technical and executive audiences.
• Worked with client security and IT operation teams to implement remediation plans.

Wright-Patterson AFB, OH, US

• Engaged in intensive Advanced Course in Engineering (ACE) cyber warfare boot camp through rigorous coursework, research, and multi-domain field operations.
• Solved graduate-level challenges for open-ended Air-Force relevant problems in exploit development, hardware security, covert communications, software reverse engineering, and red team operations.
• Participated in leadership and technical development under the mentorship of distinguished leaders in the government and military.
• Planned, lead, and executed a simulated cyber warfare campaign.

Master Of Science - Ms, Cybersecurity And Policy

Bachelor Of Science - Bs, Informatics