Objective

Seeking employment in the field of computer security at a position that encourages learning and developing my skills.

Education

Worcester Polytechnic Institute, Worcester, MA. Master of Science in Computer Science, expected Summer/Fall 2010

Worcester Polytechnic Institute, Worcester, MA. Bachelor of Science in Computer Science, Highest Distinction, received May 2002 Bachelor of Science in Mathematics, Highest Distinction, received May 2002

Boston Latin School, Boston, MA.

Work Experience

January 2008 -- Present	Symantec (formerly MessageLabs) Toronto, ON
Senior Malware Analyst Responsible for the detection and prevention of malware as part of the MessageLabs Research and Response team. Response focused on working with the Antivirus Operations and Development teams to detect malware and improve the AV scanning engine and associated tools. AV engine development included heuristics and proof-of-concept tools written in Perl, C, and C++. Malware analysis and detection included reverse engineering using disassemblers and debuggers (IDA Pro, OllyDbg), as well as related tools and utilities. Research included analysis of malware trends, studying new types of malware with a particular focus on PDF/document based malware, antivirus bypass techniques, integrating the antivirus engine with Web and IM scanning services, and developing new techniques and related intellectual property for the purpose of stopping malicious software.
November 2004 -- January 2008	Imperfect Networks / Spirent Communications Burlington, MA
Lead Vulnerability Researcher Responsible for the research and development of existing and new network-based attacks, and management of the threat development team. Research focused on analysis of threats using techniques including network protocol analysis, protocol and binary reverse engineering, and behavioral modeling. Development included both specialized threat creation from advisories and existing exploits, writing proof-of-concept exploit code in multiple languages including C and Perl, writing fuzzing tools suited for particular protocols, and use of existing automated threat tools. Was directly responsible for the addition of WiFi capabilities to the ThreatEx appliance, including creating the wireless protocols and the suite of wireless attacks. Additionally assisted in a number of roles which contributed to the success of the startup company (Imperfect Networks), including on-site sales engineering support in customer security labs; coordinating with representatives from vendors of other vulnerability databases and security products; and performing audits, penetration testing, and general security testing as part of Spirent's professional services.
January 2001 -- August 2003	Cryptography and Information Security Research Laboratory Worcester Polytechnic Institute, Worcester, MA
System Administrator Managed lab resources, including system administration and network security for more than ten Solaris and Linux workstations, two Linux servers, and an OpenBSD firewall.
Summer 2002	Force Matrix Software Worcester, MA
Lead Software Developer Was responsible for the design and development of proof of concept bioinformatics software written in assembly language to be run on NVIDIA graphics cards.
June 2000 -- August 2001	Institute for Data Communications Systems University of Siegen, Siegen, Germany
Software Developer Was responsible for the design, creation, testing, and documentation of a software package in Java to generate elliptic curves suitable for use in cryptography, as part of the ELIAS elliptic curve cryptography library.

Other Experience

April 2001 -- Present	aculei animi Toronto, ON
System Administrator Am responsible for all aspects of administration, support, and security for multiple production level servers (OpenBSD, NetBSD) used to provide roughly one hundred users with free Internet services (email, web hosting, data storage, messaging, secondary DNS, secondary MX).

Certifications

Computer Skills

Honor Societies

University Capstone Papers

Presentations and Talks