| COMPUTER SKILLS |
Perl, C/C++, Java, Scheme, Java ASM, bash, JavaScript,
Linux(Red Hat, Slackware,Gentoo),Solaris (7-9), APPLE (OSX, OS 9),
OpenSSL, make, ant, gdb
|
| WORK EXPERIENCE |
VeraCode
Burlington, MA
Oct. 2006 - Current
Senior Software Engineer (Scan Writer)
- Converted legacy engine scans to the new
scan mark up system.
- Updated the new scan mark up system to use
configuration files, instead of hard coded
values.
- Wrote an engine scan that found and
marked the existence of dead code in all given
programs.
- Wrote an engine scan that found and marked
improper Java String comparison usage.
- Wrote an engine scan that marked improper
API usage with user given data.
- Wrote an engine scan that found and marked
possible improper integer truncation
- Bug fixed other scans, so that they had a
lower false positive and a lower false negative
rate.
- Bug fixed the engine's core libraries, with
respect to Int range comparison.
Build Engineer
- Was in charge of the web portal and the
engine build system.
- Fixed web portal build system so that it
would be usable with release cycles.
- Fixed engine build system, was it was not
tied to one machine.
- Determined, setup and documented the
deployment, QA and stage environments.
- Created and documented a demo laptop build
target and environment.
- Maintained all environments, with the
changes, that development and security teams
required.
- Wrote programs that automated the process
of deploying the built code.
- Documented the deployment process for the
different build environments.
VMWare
Cambridge, MA
Jan. 2006 - Sept. 2006
Member of Technical Staff
- Supported and bug fixed a critical piece
of the build infrastructure.
- Discovered and fixed timing issues with
build infrastructure.
- Helped design the next generation of the
Build environment.
- Wrote tools that would automate the testing
of the build infrastructure.
Northeastern University
Boston, MA
Jan. 2005 - April 2005
Teacher's Assistant for Network Security
- Setup & Maintained Network Security Lab.
- Developed & tested the labs in order to
demonstrate several modern vulnerability
exploits for getting into Unix & Windows based
systems.
Voxware, Inc.
Cambridge, MA
May 2003 - Dec. 2004
Software Engineer
- Implemented libraries that allowed their
server to communicate to 3rd party
vendors.
- Designed and implemented a new library, in
Perl, in order to help validate input
from 3rd party vendors.
- Maintained legacy software, providing bug
fixes and enhancements to customers.
- Head Designer of emulator for the embedded
system.
QA Engineer
- Setup and Maintained the Bug Tracking
system.
- Designed and implemented, in Perl, a test
harness to validate input against a set
of regular expressions, and send back
different answers based on the
validity. Harness accepted socket,
STDIN, and file based input.
- Designed and implemented, in Perl, an
emulator for the embedded system that
decreased development & QA time.
- Tested the reliability and correctness for
products to be shipped.
Caradas, Inc.
Burlington, MA
March 2002 - May 2003
Consultant/Engineer
- Designed and implemented a test harness, in
Perl, for testing reliability,
correctness, and speed for customized
software.
- Designed and implemented, in Perl, each
component of VISA's 3-D Secure protocol
on Solaris.
- Designed, deployed and administered AMANDA
to back up all Solaris and Linux
computers.
- Administered a tomcat server on Solaris that
ran all of the components of VISA's 3-D
Secure protocol.
- Troubleshooted a product that would test
other vendor's implementation of VISA's
3-D Secure protocol.
CertCo
Cambridge, MA
Jan. 2000 - March 2001
QA Automation Engineer
- Wrote a Perl Module that drove the OpenSSL
libraries to make any possible type &
number of CAs & certificates.
- Designed and ran efficiency and security
tests against CertValidator.
- Automated the testing of CertValidator
through various Perl programs.
- Administered many Solaris 7/8 and Linux
computers.
- Started the porting of CertValidator to
Linux.
QA Technician
- Wrote Perl programs to automate the testing
of CertValidator 2.6.
- Wrote Perl and sh programs to update the
environment on the Solaris systems.
- Taught QA and engineering personnel the
basics of UNIX and Solaris.
- Administered 9 Solaris 7 computers.
- Tested CertValidator for UNIX correctness
and bugs.
- Tested cryptography libraries for crypto
errors.
Adero Inc.
Boston, MA
June 1999 - Dec. 1999
Jr. Software Engineer
- Designed and administered an Intel Linux
Oracle Computer.
- Automated the insertion of logs into the
Oracle Database.
- Wrote Perl programs to analyze the data in
the Oracle database.
- Wrote a TCL/Expect script that automated the
running of commands remotely on 20-30
computers.
- Wrote a Perl program that given a list of
domain names found the IP address, the
AS, and probable physical location of
the servers.
|