114 lines
4.6 KiB
Markdown
114 lines
4.6 KiB
Markdown
---
|
|
name: Paul Halvorsen
|
|
keywords: python, c, docker, containers, tdd, test driven development, pytest, ci/cd, javascript, jquery, php, mysql, rest, api, json, xml, git, nginx, remote, testing
|
|
left-column:
|
|
- 'Phone: +1-410-236-4665'
|
|
- 'Citizen of the United States'
|
|
right-column:
|
|
- 'Email: [pmghalvorsen@gmail.com](mailto:pmghalvorsen@gmail.com)'
|
|
- 'Holding TS/SCI, Last Re-Up: 2018'
|
|
...
|
|
# Summary
|
|
|
|
I'm a Software Engineer with over 11 years development and 15 years professional experience, with exposure to C, Python, PHP, JavaScript, Java, and C++ languages; various SQL databases; JQuery and Pytest frameworks; Docker containerization; and Rest API, JSON, XML, and nginx technologies.
|
|
|
|
# Work Experience
|
|
|
|
## Binary Defense
|
|
|
|
**Sr Software Engineer**: April 2022 - Present
|
|
|
|
- Python development using pyenv, pipenv, cython, docker build environment, gitlab pipelines, and static compilation
|
|
- Develop security alarms for Windows, Linux (Debian and RedHat), and MacOS
|
|
- Design and build containment for all platforms upon detected compromise
|
|
|
|
## Kyrus Tech
|
|
|
|
**Sr Software Engineer**: Nov 2020 - April 2022
|
|
|
|
- Perform test driven development for all tasks: C, Python/Pytest, Docker, GitLab CI/CD
|
|
- Build covert communications and file transfers proxy: HTTPS, Apache Thrift, Rest API
|
|
- Design compact router fingerprinting and vulnerability analysis: Android, HTTPS, TCP/IP, StreamCypher Encryption
|
|
- Modify existing code to suppress logging from inside the Linux Kernel: various Linux Kernel versions, Ghidra
|
|
|
|
## Parsons
|
|
|
|
**Cyber Security Software Engineer**: Apr 2018 - Nov 2020
|
|
|
|
- Continue development of covert Windows application: C, C++, Python
|
|
- Build modular solution for plug and play architecture
|
|
- Design custom API for minimal data transfer to back-end
|
|
- Encrypt storage and comms using AES shared key to maintain confidentiality and integrity
|
|
- Build prototype back-end service for file storage and search: Java, Tomcat, Niagarafiles (NiFi), nginx, Hadoop, MySQL, LDAP, RBAC
|
|
- Create API for uploading files via web interface or CLI
|
|
- Track and maintain multi-level user access
|
|
- Generate metadata for searching
|
|
|
|
## NSA
|
|
|
|
**Security Software Engineer**: Nov 2011 - Apr 2018
|
|
|
|
- RedTeam DevOps development of browser enumeration, manipulation, and exploitation: PHP, JavaScript, JQuery, CSS, Python, MySQL, Java, Apache, Tomcat, Linux, Windows, Chrome, Firefox, Safari, IE, Edge
|
|
- Design Rest and JSON API to transfer data between targets, server, and UI
|
|
- Deliver covert JavaScript to targets for enumeration and exploitation
|
|
- Redesign front-end to provide a dynamic UI with real time target data and graphs and charts for in-depth data
|
|
- Design MySQL database to converge enumeration and exploitation tools
|
|
- Update PHP back-end for security and performance
|
|
- Advise and develop vulnerability mitigation strategies
|
|
- Train and provide SOPs to NSA RedTeam operators for various tools
|
|
|
|
**Systems Engineer**: Sept 2009 - Nov 2011
|
|
|
|
- Deploy, maintain, and monitor 30+ systems with 130+ Red Hat Enterprise Linux (RHEL) servers: LDAP, DNS, Apache, NiFi, Hadoop, Apache, Puppet, DHCP, PXE
|
|
- Develop and deploy monitoring, reporting, and issue correcting scripts: Python
|
|
- Organize, train, and participate in team performing 24x7 call-in rotation
|
|
- Responsible for 5+ domestic and foreign system deployments
|
|
|
|
## Salisbury University
|
|
|
|
**Software Developer**: Nov 2006 - May 2008
|
|
|
|
- Funded through the Wallops Flight Facility (NASA)
|
|
- Provide simplified UI and scenario builder for the Satellite Tool Kit (STK): Managed C++
|
|
- Design risk assessment scenarios for launch vehicles and UAVs over the DELMARVA peninsula
|
|
- Collaborate with Geographic Information Science (GIS) for mapping
|
|
|
|
**Lab Administrator**: Sept 2007 - May 2009
|
|
|
|
- Support Math and CS departments at SU
|
|
- Maintain the Linux labs on campus: dual boot OpenSUSE, WindowsXP, and OpenSUSE server
|
|
- Perform backups, updates, user management (LDAP), disk quotas, and remote access
|
|
|
|
# Education
|
|
|
|
University of Maryland Baltimore Campus
|
|
|
|
: Masters in Computer Science; 2013. Thesis: "Stateless Detection of Malicious Traffic: Emphasis on User Privacy"
|
|
|
|
Salisbury University
|
|
|
|
: Bachelors in Computer Science; 2009. Magna Cum-Laude
|
|
|
|
Security+
|
|
|
|
: ID: COMP001021281239; Exp Date: 04/04/2024
|
|
|
|
Royal Military College (RMC Canada)
|
|
|
|
: Training in OpenBSD development and administration
|
|
|
|
# Miscellaneous
|
|
|
|
RedBlue Conference
|
|
|
|
: Presented combination web enumeration/exploitation tool
|
|
|
|
National Conference for Undergrad Research (NCUR)
|
|
|
|
: Presented development of STK scenario building and manipulation
|
|
|
|
SANS Courses
|
|
|
|
: Staying up-to-date on security research
|
|
|