Meng Li Email & Phone Number

Sunnyvale, Ca, Us

Seattle, Wa, Us

* Designed and implemented backend storage and replication model for the auth system within AWS, serving 500 million requests per second (public released number as of Dec 2021).* Designed and implemented routing, event stream, and cross-regional replication for a distributed graph data store, also known as Cloud Directory. The store specialized in low write throughput, extremely high read throughput, and low read latency.* Helped ship several public facing V1 services throughout the years at AWS, including Amazon Cognito User Pools, Cloud Directory, and AWS Organizations.* Continuously improved the operational standard of an entire team of ~100 engineers.* Created development and testing standards for an organization of ~100 engineers.* Helped multiple managers develop concrete team roadmaps for both features and operational improvements.

Seattle, Wa, Us

Seattle, Wa, Us

Redmond, Washington, Us

* Developed and tested the Microsoft Visual Studio module that supports secure software development processes. Module supported security bug and issue tracking as well as reporting.* Prototyped Fuzzing as a Service on Azure by using the existing state of art desktop fuzzing technology that my group developed.

Redmond, Washington, Us

• Lead a team of six software engineers to validate the state of security, privacy, and accessibility tooling at Microsoft. We cover the complete technology stack including x86 assembly, static analysis for C++, C#, JavaScript, HTML, ASP.NET, SQL on Windows and Azure. Tooling covers fuzzing, OS attack surface, IIS analysis, static code analysis, crash dump triaging, threat modeling, and internal corporate network 0-day threat analysis.• Produce multiple papers for internal and external security tooling comparative analysis. This includes fuzzers, dynamic web scanners, native static analysis, and JavaScript static analysis. This data is driving the future of security tooling investment at Microsoft.• Produce benchmarks and a suite of security, privacy, and accessibility issues of varying types in order to provide examples to all products at Microsoft on what not to do. These suites of benchmarks also help us find gaps in our automated detection capabilities and drive the future investment decisions. The suites are composed of C, C#, JavaScript, PHP, and HTML code.

Redmond, Washington, Us

• Designed, implemented, and tested several company-wide mandated binary static analysis checkers that looked for security mitigation capabilities within all binaries in an entire product suite. These checkers looked for deprecated library linking, entropy level in stack cookie canary generation and ASLR, unnecessary executable memory sections.• Designed, implemented, and tested company-wide mandated OS attack surface scanning tool. This tool provided information on elevation of privilege issues, new fuzzing targets, mal-configured IIS settings, etc. Various versions of the tool used C, C++, C#, F#, and VBScript.• Code reviewed over 100k lines of native windows user/kernel code to discover security vulnerabilities. Using the manual code review heuristic, helped produce native static analysis plugin that would automate away several classes of bugs.• Automated UI testing via internal API layer on top of UIAutomation accessibility API via C#.

Göteborg, Sweden, Se

• Worked on a team of ten engineers to build and extend a software suite that monitored machine health using vibration signals in time and frequency domain. The entire suite contained about one million lines of non-test code.• Designed and programed COM objects, MFC based win32 UI in C and C++.• Created database tables and schema on SQLServer 2005 and Oracle 8/9i.• Researched, prototyped and developed a mechanism for monitoring long term machine health by performing time domain analysis after frequency domain filtering of vibration signals.• Trained and conducted internal ISO 9001 audit

Meng, Electrical Engineering

Bs, Electrical Engineering