Star Salzman Email & Phone Number

I was hired to take their existing Vulnerability Management program to the next level during an extremely challenging transition period for the company.Major Accomplishments:• Decreased the number of Critical risk infrastructure vulnerabilities by 67%• Refactored the existing vulnerability management policies to better align with the company’s risk tolerance• Created and rolled out a brand new risk acceptance process, which will ensure that 100% of Critical and High risk vulnerabilities are either remediated or risk accepted within the timelines set within our policy

Built a Vulnerability Management program for Twitter from the ground-up during an extremely challenging transition period for the company. Major Accomplishments:Architected technical design and produced a roadmap for the next 2 years, built scalable automation for ingest/triage and dashboarding using python and splunkDecreased the percentage of servers with critical or high risk vulnerabilities from 60% to 0.5% across ~350k servers.Increased network scanning coverage from 20% to 99.7% across ~350k serversRolled out vulnerability scanning agents to all ~2500 end user devices.Significantly improved application security by consolidating down to one tool (semgrep) and building automation to scan our exceptionally large Bazel monorepo, at a cost savings of $400kCreated a single pane of glass for all vulnerability data, which required extensive attribution automation

UT is a federation of hundreds of departments with no central IT authority. My mandate was to find ways to move behavior toward security in this challenging environment. Thus, I was involved in IT governance negotiations, building automation and reporting, leading penetration tests of our campus and external campuses, and performing architecture and regulatory evaluations of new and existing systems. I act as CISO for UT Austin when our CISO is unavailable. I also manage a team of 6 direct reports who do risk analysis, penetration testing, application assessments, and vulnerability research.Major Accomplishments:Created a container-based vulnerability management program using python, splunk, docker-on-yarn, nmap, Tenable.sc and various other security tools. I architected this service to be scalable, so we were able to extend this program to the other campuses in the UT System at no cost, serving hundreds of thousands of endpoints and thousands of users. Using this program, we were able to increase UT Austin's BitSight score by over 40%, which in turn decreased our breach insurance premiums.Created a high-quality external penetration testing program and offered it to other UT System campuses at cost recovery, increasing our headcount by 2.Leveraging our automation, we are consistently able to achieve organizational root compromises (Domain Admin or similar) ~50% of the time while producing high-quality reports during a 2-3 wk engagement. These outcomes compare favorably with penetration testing providers that charge 5-10x as much.Represented the security office on two high-impact governance committees: endpoint management and next-generation platform. On both committees I was able to drive our objectives by creating high-quality presentations using vulnerability data, and leveraged my experience with both endpoint management and platform engineering to help lead the committees to good architectural decisions.

Austin, Texas, United States

Gave several lectures on security for UT Austin's Intro to Security class, CS 361s, covering multiple topics including network security, password attacks and post-exploitation. Graded reports and ran office hours.

Austin, Texas Area

In this role I was responsible for the operations of the rapidly-expanding Hadoop infrastructure used to build and conflate data for Apple Maps. Our small team (myself and two direct reports) managed dozens of Hadoop clusters across thousands of nodes.My mandate was to increase performance and reliability while allowing developers and data scientists to focus on features. In addition, I managed a splunk deployment for Maps Operations in general.Major Accomplishments:Created a custom agent and set of dashboards to visualize jobs that had adverse effects on cluster performance using python and splunk. These dashboards could handle 10s of thousands of jobs per day across dozens of clusters. There were no off-the-shelf tools that could compete at the time of creation.Created a custom agent that interacted with the YARN ResourceManager to de- prioritize jobs that did not follow standards.Managed the largest-at-the-time splunk deployment using clustering in the world.

Austin, Texas Area

In this role I performed web assessments, penetration tests, risk analysis, and built automation.Major Accomplishments:Created a system that automatically searched windows fileshares for sensitive numbers such as SSNs. Using this system the team was able to find and remediate thousands of SSNs and credit card numbers.Successfully reverse-engineered HID prox card format and was able to demonstrate a card-cloning attack that we shared with the FBI.Discovered an LFI in Oracle Forms and got credit (published after i left: https://www.oracle.com/security-alerts/cpujan2014.html

Austin

In this role I managed systems and servers for departments such as the PoliceDepartment, Utilities (including the power plant) and Environmental Health and Safety.Major Accomplishments:Created a prod VMWare VSphere deployment from scratch with no training.Automated hundreds of P2V migrations using powershell and vmware.