Saeed Sadeghian, Phd Email & Phone Number

Greater Toronto Area, Canada

Toronto, Canada Area

Toronto, Canada Area

Toronto, Canada Area

- Extensive experience performing comprehensive Web Application Assessments following OWASP testing methodology (Injection flaws such as SQL Injection and XSS, Session management issues, Access Control issues, etc.) - Experienced performing iOS and Android mobile application security assessment, following the OWASP Mobile 2016 and Mobile Security Testing Guide and using testing tools such as Frida, Needle, Drozer, Hopper Disassembler, and JEB Decompiler. Extensive experience performing security assessment of complex Mobile APIs. - Experienced performing Red team security assessment for large organizations. - Performed external and internal penetration test of clients' network security posture using automated tools and manual techniques or other creative approaches to identify and verify security vulnerabilities. - Experienced employing network and web vulnerability assessment tools including Nessus, Nexpose, Acunetix, AppScan, WebInspect, Netsparker, Burp Suite,SoapUI etc. - Performed complex wireless attacks against both wireless clients and access points. - Used social engineering techniques to obtain sensitive information and network access - Created comprehensive assessment reports that clearly identify root cause and remediation strategies. - Became part of client team, and worked efficiently to communicate their strengths, weaknesses and future steps in the limited time frame of engagements. - Worked closely with the internal team to improve methodologies, procedures, tool sets, and offerings through collaborative development work and documentation.

Toronto, Canada Area

- Performed external and internal penetration test of clients' network security posture using automated tools and manual techniques or other creative approaches to identify and verify security vulnerabilities. - Extensive experience performing comprehensive Web Application Assessments following OWASP testing methodology (Injection flaws such as SQL Injection and XSS, Session management issues, Access Control issues, etc.) - Experienced employing network and web vulnerability assessment tools including Nessus, Nexpose, Acunetix, AppScan, WebInspect, Netsparker, Burp Suite,SaopUI etc. - Performed complex wireless attacks against both wireless clients and access points. - Used social engineering techniques to obtain sensitive information and network access - Created comprehensive assessment reports that clearly identify root cause and remediation strategies. - Became part of client team, and worked efficiently to communicate their strengths, weaknesses and future steps in the limited time frame of engagements. - Worked closely with the internal team to improve methodologies, procedures, tool sets, and offerings through collaborative development work and documentation.

Calgary, Canada Area

Design and implementation of applied Secure Computation (MPC) Protocols, and Privacy Enhancing Protocols- Proposed a novel approach to Private Function Evaluation (PFE)- Provided the first implementation for optimal size Universal Circuits (in C++) - Designed and implemented (in C++) ZIDS, a system for Privacy-Preserving intrusion detection- Designed and implemented (in C++) a protocol for Oblivious DFA Evaluation protocol, enabling private pattern matching (matching private pattern against, private input strings).

Calgary, Canada Area

Network Systems Security, Winter 2013 - Conducted hands-on tutorial on network security assessment toolsIntroduction to Cryptography, Fall 2011,2012 - Conducted tutorial sessions on course topicsExplorations in Information Security, Winter 2012 - Conducted tutorial sessions on different introductory topics such as privacy, anonymity, cryptography, ...

Redmond, Wa

- Performed cutting edge research involving cryptography, privacy and machine learning. - Designed Differential Privacy mechanisms for learning tasks - Used computational geometry tools, such as coresets to handle large data sets

Calgary, Canada Area

- Implemented a privacy-preserving protocol running over internet between Azure cloud servers - Developed an scalable design to handle massive data sets independent of executing system specification - Employed Crypto++ library to implement cryptography primitives - Employed Intel vTune and Intel Inspector to identify the bottlenecks and potential for parallelization - Implemented the multi-threading and synchronization in computation and communication layers using pthread - Implemented low level file retrieval optimizations, to parse very large data sets - Developed a Redis client in C, capable of uploading datasets and making the set intersection query - Implemented a fast set intersection (on plain data) over network, capable of running over billion-element sets, outperforming Redis No-SQL database for the same operation in terms of scalability and speed

Doctor Of Philosophy (Ph.D.), Computer Science, A

- Foundations of Modern Cryptography - Network Systems Security - Complexity Theory PhD. thesis: New Techniques for Private Function.

Master Of Science (M.Sc.), Information Technology - Information Security

- Applied Cryptography - Security Protocols - Network Security - Secure Computer Systems - Database Security - Formal Models.