University of Washington

Technical Program Manager at Amazon

Amazon

Technical Program Manager

Facebook

Security Program Manager

Microsoft

Vulnerability Management Roles•	Identification and classification of vulnerability severity and business impact•	Enterprise-wide scanning for vulnerable systems•	Partnerships with internal customers to drive conformance to security policy and timely remediation of security findings•	Reporting/analyticsResponsibilities•	Architect and lead developer of continuous monitoring/scanning agent•	Manual and automated assessments of servers and network devices•	Automating internal tools and metrics capabilities•	Research security findings and vulnerabilities•	Internally developed tools using: Python, C#, Ruby, Perl, SQL Server, running on Windows and Red Hat Linux servers.

Boeing

Security Engineer

Collaborating with an engineering group at Boeing in prototyping fully autonomous ground vehicle swarms with small form factors for SLAM applications (simultaneous localization and mapping)• Designed and developed server-side platform to use open source real time operating system ROS modules in both python and c/c++ following the publisher subscriber design pattern• Developed embedded systems c libraries for interfacing with various types of low cost range finding sensors (sonar, ir)• Assisted with basic electrical engineering

Software Engineer

Developing analytics and reporting applications.• Migrated existing SQL Server data warehouse applications to an Oracle stack• Developed OLTP/OLAP applications for analytical and reporting systems• Developed backend Java web services to run on Oracle WebLogic middleware for peforming trend analysis, formatting data, applying statistical methods etc.• Migrated existing reporting applications away from deprecated Java 5 libraries to Java 7• Mentoring teammates on Java coding standards and best practices• Developed Java framework to replace commercial business-intelligence visualization library• Wrote Unix bash scripts to automate code deployment and regression testing

- Performed security assessments on applications to identify security risks such as XSS, SQL injection, privilege escalation, path traversal, etc.•	Reverse engineered Java programs to expose critical vulnerabilities•	Developed python tool to format http responses and automatically detect possible vulnerabilities•	Attended DefCon security conference

Application Security Assessment Intern

- Wrote unit tests and automated testing scripts using Selenium tools and PHPUnit•	Assisted with frontend JavaScript development

Zach Turk

Zach Turk