Tim Farley Email & Phone Number

Denver, Colorado, Us

Helping keep clients secure through security analysis of their web applications.

Atlanta, Georgia, Us

Security engineer supporting teams building Internet of Things (IOT) enabled lighting fixtures and their associated applications. Performed pen tests and application testing, source code reviews, SDLC education, and other security program elements.

Armonk, New York, Ny, Us

As Silverpop was acquired by IBM to become the core of IBM Watson Customer Engagement's products for marketers, I continued to monitor application security for their cloud-based (SaaS) products including IBM Marketing Cloud. Supervised periodic application security testing & compliance efforts. Tracked security fixes via IBM's PSIRT program, interfacing with the development and production operation teams as needed to ensure timely deployment of patches. Participated in secure engineering education and compliance efforts within our product teams. Interfaced with customer support and production teams as needed to evaluate security-related customer incidents.

Armonk, New York, Ny, Us

Advised the product teams in improving and enhancing the security of the company's SaaS products targeted at email marketers. Conducted periodic application security tests. Investigated security-related customer incidents as needed. Maintained and enhanced internal tools used as part of security monitoring. Helped support customers with unique security logging needs. Analyzed malware received by our email server, in an apparent APT attack against email marketers.

Research into tools to combat misinformation on the internet.

Researched new uses for electronic media to advance science education and skepticism

Madison, Wisconsin, Us

Taught classes in reverse engineering of binary software, application security, ethical hacking and other computer security concepts all over the United States for corporate and government employees.

Alpharetta, Ga, Us

Reverse engineered software interfaces and internals of applications used in corporate settings, to interface them with OpenSpan's product. The product allows disparate applications to be integrated with each other, and repetitive tasks to be automated, even if the target applications have no published API.

Us

Was lead developer on products targeted at developers of ASP.NET web applications. Led the development on SecureObjects, a programming library and set of wizards to assist in developing secure web applications. SPI was awarded U.S. patent 8,266,700 on the technology I developed for this. I also updated DevInspect, a web application scanner for developers, to better interface with SecureObjects and Visual Studio. Researched future products as part of the SPI Labs research team.

Burlington, Ma, Us

Designed enhancements for WhatsUp Gold, a leading network monitoring tool. Added protocol and graphical enhancements for version 7 and 8 of the product, including improved SNMP support and improved device auto-discovery. Conceived and designed a new asynchronous event handling system for the product, producing a design document that received an internal award. Assisted with support escalation, defect triage. Participated in the design and implementation of the next-generation enterprise version of the product currently under development, including support for SNMP v3 and IP v6. Gave presentations at user groups for the product.

Armonk, New York, Ny, Us

Designed and maintained detection logic of RealSecure network sensor, the company’s leading product at the time, which held 89% market share. Researched exploits and detection methods for network intrusion detection systems. Published papers and gave presentations at both internal and external functions including several international IDS symposia. Designed several testing and development tools still in daily use by throughout ISS. Researched several new product ideas including one that resulted in U.S. Patents 7,089,428 and 8,141,157. Consulted with all internal groups at ISS including IT, Technical Support, Sales Engineering, Consulting, Managed Services, M&A Technical Due Diligence and all software product groups.

Us

Worked with both the client and server teams on enhancements to RemoteWare, a leading remote access utility package. On my own initiative I reverse-engineered the previously undocumented proprietary client-server protocol used by the product, and started a design document for it. Wrote a security analysis of the protocol outlining ways that it could be attacked. Designed & implemented a Microsoft Network Monitor protocol decoder DLL for the protocol. Contributed ideas to the design of the next generation of RemoteWare.