Christopher Martin Email & Phone Number

San Francisco, California, Us

Evaluated several SIEM products and ran proof of concepts to select a code first detection pipeline.Evaluated several WAF solutions and ran proof of concepts to select a WAF and integrate it in application monitoring pipeline.Migrated existing SIEM from unmanaged SumoLogic to Infrastructure as Code managed panther.io, using Terraform, SaltStack, Snowflake, and AWS.Created an maintained a catalog of all audit logs for Data Sub-processors, and Tier 1-3 SaaS vendors, and their security relevancy to inclusion in the detection pipeline.Deployed Crowdstrike SIEM Connector to AWS using SaltStack and Vector to integrate Crowdstrike reporting and automated alerts into our SIEM.Unified a variety of log streams into a single SIEM with centralized alerting and automations.Led a team to build a pipeline for analyzing and extracting security relevant data from k8s application logs.Worked extensively with SRE, Infra, and other Operations teams to roll out log collection tooling in several environments using company standard tooling.

San Francisco, California, Us

Develop and deploy integrations for Okta, Duo, osquery, and auditd logs to be ingested into Splunk using Terraform and AWS/S3.Created a standard for reusable terraform modules for use across the security organization.Developed several terraform modules for deploying security resources and automating ingestion of data into Splunk and ELK detection stacks.Write Splunk queries for automated detection of security incidents.Integrate Netflow data and Cisco Stealthwatch alerts with Splunk.Performed on-call 24/7 incident response rotation.

San Francisco, California, Us

Automated file integrity management practices using osquery, python, and AWS lambdas and step functions.Created architecture documents for network monitoring and intrusion detection systems for both office networks and AWS production cloud network.Deployed network monitoring solution using a combination of corelight hardware/aws virtual images and open source Zeek software.Created Sumologic dashboards for visualizing network monitoring data and detecting changes in traffic patterns for alerting and detection.Used terraform to create an infrastructure as code setup for sumologic collector and source deployments as well as managing role based and team based access to sumologic for new users.Developed deployment guide and runbooks for configuring and managing AWS and Signal Science WAF products.Developed a python tool for defining and deploying AWS WAF rules in an automated, infrastructure as code fashion.Worked to enable TLS certificate automation and notifications using Lemur and custom python code.Participated in on-call rotation as part of the Security Incident Response Team.Developed jupyter notebooks and automated tools for finding improperly stored secrets in source control and other locations.

New York, New York, Us

Responsible for the configuration and maintenance of Tenable Nessus and Rapid7 Nexpose security scanning tools. Developed custom software in python to sync assets and systems from in-house CMDB tool with both scanning products to ensure full coverage of out network both from an internal and external viewpoint.Responsible for managing and coordinating quarterly penetration tests with third party vendors. This includes identifying in-scope and out-of-scope assets, rules of engagements, and defining reports, artifacts, and deliverables.Utilized reports from third party penetration tests and in-house automated tooling to create remediation plans and patching schedules for both large production networks, and individual corporate offices. Worked with engineering teams to track the completion of patching and vulnerability management.Spearheaded project to move to centralized secrets management using Hashicorp Vault. Consolidated secrets from a variety of secure and less than secure storage mechanisms into a single, managed cluster of cryptographically secure storage, with appropriate access control and secrets lifecycle management.Responsible for the rollout of Web Application Firewall product (Signal Science) in front of all public facing web applications and APIs.Work as part of the Incident Response Team to document, triage, and analyze log data, endpoint data, and any samples during incidents.Actively develop and present a variety of security-focused documentation and training. This includes best practice documentation, policy level documents, and end-user presentations.Developed tools to enable consolidation of security-centric logs into a single common logging platform (SumoLogic). Used data from common logging platform along with data science tools such as pandas, numpy, and scikit to perform data analysis.Worked with developers and operations to add static analysis and container scanning tools to the build pipeline.

Portland, Us

As an application security engineer at Simple, I am responsible for a variety of tasks including penetration testing, incident response, static code analysis and developer outreach. My penetration testing duties include assessments of backend REST services, front end web applications (both traditional and modern SPA style applications) and mobile applications on iOS and Android. In this capacity I use tools such as Burp Suite, sqlmap, ZAP, and custom developed scripts. I also perform source code analysis and work to maintain automated source code analysis solutions as part of continuous integration. I enjoy teaching others about security concepts, and I am able to do this as part of the Simple internal developer security education program. This includes monthly presentations on security related topics, per-project consultation to create threat models and attack trees, and general availability for developers with security related questions.Triaging bug reports, security alerts, and incoming file attachments for safety rounded out my duties.

Beaverton, Or, Us

Responsible for performing penetration tests against mobile applications (iOS, Android, and Tizen) and their associated services.Developed a checklist and long form guide on secure coding practices for developers.Created and presented in-house courses on security, reverse engineering, programming best practices to technical and non-technical audiences.Responsible for architecture, development, integration, and training on certificate pinning implementation for all mobile development (iOS and Android).

Beaverton, Or, Us

Lead developer for a Greenfield application focused on Commerce and making extensive use of Core Data, UIKit Dynamics, and AFNetworking.Performed both black box and gray box penetration tests and security analysis of the application prior to App Store submission. This included static analysis of binaries, fuzzing of network calls, and reviewing checkmarx code reports.Responsible for the secure storage of data on the device including key generation, file based encryption, as well as encryption of individual data properties inside of core data.Researched SSL Certificate and Public Key Certificate pinning options to ensure the security of network API calls.Responsible for developing APIs to interact with a variety of new and existing web services using REST, JSON, and XML.Wrote content syncing, storing, and caching logic for both text and image data. This included an image-caching layer optimized for speedy presentation of variable sized images during scrolling and other animations.Responsible for the secure storage of data on the device including key generation, file based encryption, as well as encryption of individual data properties inside of core data.Developed several reusable data-source objects for use with UICollectionView and other row-based views.Developed custom UI controls.

Developed a custom sales and location tracking application for a third party client.Application included AddressBook and Salesforce.com integration to import sales contacts including geographic location for overlay onto MapKit views.Application used CoreLocation to track traveling salespeople and alert them when they were within a configurable distance of a client.Application prompted the user to enter information about client visits and sales, which was then uploaded to a remote web service for reporting purposes.Developed proof of concept application to communicate with custom hardware over Bluetooth and provide visualization of movement data.

Developed a .NET 4 desktop application localized in 11 languages using WPF that interacted with Un-managed components using a combination of Windows Message Passing, P/Invoke, and Named Pipe IPC.Evaluated code static analysis results for vulnerabilities, performed static analysis and penetration tests of applications to evaluate application security, documented and responded to all vulnerability reports regarding technologies used in applications.Reverse engineered and analyzed new malware samples to recover keys used in Ransomware attacks, to enable support staff to recover personal data and generate virus detection engine signatures.Wrote C++ code to add functionality to existing libraries including CPython and Lua embedded runtimes.Competed in the Symantec Cyber Security war games, placing 87th out of 200 teams. Competition required extensive information gathering and enumeration of both public and hidden services, exploiting web applications as well as network services, as well as recovering encrypted and steganographic data.

Us

C#, Silverlight, Entity Framework, T-SQL, BizTalk

C# and ASP.NET, data visualization with Flash and Silverlight. Web Services, xslt, and lots of javascript

Develop ASP.NET applications using ASP.NET 2.0 and .NET framework 3 and 3.5, and the ASP.NET AJAX toolkit/jQueryDevelop data access libraries using LINQ to SQL toolkitDesign and deploy scalable databases using SQL Server 2005 and SQL Reporting Services, created custom dynamic front end to SQL Reporting ServicesDevelop Windows desktop applications using WPF, the Microsoft POS.NET framework and the Microsoft Synchronization frameworkDevelop web applications using PostGIS and SQL Server 2008 Spatial Datatypes, and integrate the data stores with the Microsoft Virtual Earth CTP silverlight control.

Develop GeoProMT, a web based project management application for Geospatial applications using PHP4Convert GeoProMT to use the new Object Oriented capabilities of PHP5, and integrate the application with the Smarty Templating engine.Tested new PHP5 class libraries using PHPUnit.Added AJAX capabilities using Prototype and Scriptaculous Javascript libraries.Design and deploy GeoProMT database backed using PostGIS

Taught Certified Ethical Hacker courses, Network+ and Security+ coursesResponsible for complete rebuild of corporate and classroom network from the ground up, including upgrading IOS and setting up proper ACLs, upgrading all servers to windows 2003, enabling IPSec and VPN functionality.Taught all development classes including C#, ASP.NET, SQL Server 2000 ProgrammingDeveloped in house Contact Management Software using ASP.NET, C#, and NUnit.

Managed FreeBSD 6 web server with multiple users.Performed penetration tests and security audits internally on managed servers and externally for various clients.Was responsible for creating and delivering reports to management and company owner regarding security findings.Primary responsibilities include design and development of internal and customer facing web services facilitating import and export of ecommerce and inventory data in ASP.NET.Developed a new customer tracking system using C#/ASP.NET, SQL Server 2000 and Microsoft SharePoint.Wrote test suites for all internally developed software using NUnit.

Developed full stack web application based on Ruby on Rails to parse MLS listings and generate KML files and Google Maps embedded code for realtor websites.Contributed to the GeoNames ruby gem, adding code to integrate with the paid web service for doing geospatial lookups.Developed a KML parsing and generating ruby gem for internal use.Wrote ruby code to integrate with Authorize.net for billing and paymentsWrote ruby code to retrieve and parse MLS listings on a schedule.

Developed custom applications and web services using C#/ASP.NET and Cold Fusion.Developed and tested cross platform OSHA compliance survey software using AppForge for PalmOS, SQL Server and C#/ASP.NET.Developed custom web services for bulk data transfer from ecommerce sites to internal accounting applications using C#, Web Services, and ASP.NETWrote test suites for all internally developed applications using NUnit

Bachelors, Geography, Computer Science

Open Source Intelligence