## Summary

I'm a Software Engineer with over 11 years development and 15 years professional experience, with exposure to C, Python, PHP, JavaScript, Java, and C++ languages; various SQL databases; JQuery and Pytest frameworks; Docker containerization; and Rest API, JSON, XML, and nginx technologies.

## Work Experience

### Binary Defense

**Sr Software Engineer**: April 2022 - Present

 - Python development using pyenv, pipenv, cython, docker build environment, gitlab pipelines, and static compilation
 - Develop security alarms for Windows, Linux (Debian and RedHat), and MacOS
 - Design and build containment for all platforms upon detected compromise

### Kyrus Tech

**Sr Software Engineer**: Nov 2020 - April 2022

 - Perform test driven development for all tasks: C, Python/Pytest, Docker, GitLab CI/CD
 - Build covert communications and file transfers proxy: HTTPS, Apache Thrift, Rest API
 - Design compact router fingerprinting and vulnerability analysis: Android, HTTPS, TCP/IP, StreamCypher Encryption
 - Modify existing code to suppress logging from inside the Linux Kernel: various Linux Kernel versions, Ghidra

### Parsons

**Cyber Security Software Engineer**: Apr 2018 - Nov 2020

 - Continue development of covert Windows application: C, C++, Python
    - Build modular solution for plug and play architecture
    - Design custom API for minimal data transfer to back-end
    - Encrypt storage and comms using AES shared key to maintain confidentiality and integrity
 - Build prototype back-end service for file storage and search: Java, Tomcat, Niagarafiles (NiFi), nginx, Hadoop, MySQL, LDAP, RBAC
    - Create API for uploading files via web interface or CLI
    - Track and maintain multi-level user access
    - Generate metadata for searching

### NSA

**Security Software Engineer**: Nov 2011 - Apr 2018

 - RedTeam DevOps development of browser enumeration, manipulation, and exploitation: PHP, JavaScript, JQuery, CSS, Python, MySQL, Java, Apache, Tomcat, Linux, Windows, Chrome, Firefox, Safari, IE, Edge
    - Design Rest and JSON API to transfer data between targets, server, and UI
    - Deliver covert JavaScript to targets for enumeration and exploitation
    - Design front-end to provide a dynamic UI with real time target data and graphs and charts for in-depth data
    - Design MySQL database to hold and quickly query enumeration and exploitation data
    - Update PHP back-end for security and performance
 - Advise and develop vulnerability mitigation strategies for various military and government customers
 - Train and provide SOPs to NSA RedTeam operators for various tools

**Systems Engineer**: Sept 2009 - Nov 2011

 - Deploy, maintain, and monitor 30+ systems with 130+ Red Hat Enterprise Linux (RHEL) servers: LDAP, DNS, Apache, NiFi, Hadoop, Apache, Puppet, DHCP, PXE
 - Develop and deploy monitoring, reporting, and issue correcting scripts: Python
 - Organize, train, and participate in team performing 24x7 call-in rotation
 - Responsible for 5+ domestic and foreign system deployments

### Salisbury University

**Software Developer**: Nov 2006 - May 2008

 - Funded through the Wallops Flight Facility (NASA)
 - Provide simplified UI and scenario builder for the Satellite Tool Kit (STK): Managed C++
 - Design risk assessment scenarios for launch vehicles and UAVs over the DELMARVA peninsula
 - Collaborate with Geographic Information Science (GIS) for mapping

**Lab Administrator**: Sept 2007 - May 2009

 - Support Math and CS departments at SU
 - Maintain the Linux labs on campus: dual boot OpenSUSE, WindowsXP, and OpenSUSE server
 - Perform backups, updates, user management (LDAP), disk quotas, and remote access

## Education

University of Maryland Baltimore Campus

: Masters in Computer Science; 2013. Thesis: "Stateless Detection of Malicious Traffic: Emphasis on User Privacy"

Salisbury University

: Bachelors in Computer Science; 2009. Magna Cum-Laude

Security+

: ID: COMP001021281239; Exp Date: 04/04/2024

Royal Military College (RMC Canada)

: Training in OpenBSD development and administration

## Miscellaneous

RedBlue Conference

: Presented combination web enumeration/exploitation tool

National Conference for Undergrad Research (NCUR)

: Presented development of STK scenario building and manipulation

SANS Courses

: Staying up-to-date on security research