Proficient at web application/network security testing that could affect users in a dangerous way. Able
to diagnosis computer hardware and software problems.
Overview
9
9
years of professional experience
Work History
Security Researcher 2
Microsoft
08.2021 - Current
Reproduced and triaged incoming vulnerability reports from external security researchers submitting to the Microsoft Security Response Center.
Worked on variant hunting efforts for critical submissions that came into MSRC.
Presented at multiple internal/external conferences about working with external security researchers and authentication/authorization research.
Bug Bounty Hunter
Self-Employed
06.2016 - Current
Have participated in various bug bounty programs to find vulnerabilities affecting companies.
Air Conditioner Repair
Airways Unlimited
06.2016 - 08.2016
Helped repair air conditioners and heaters around the Silver Spring area.
Education
High School Diploma -
DeMatha Catholic High School
Hyattsville, Maryland
2014
No Degree - Prerequisite Classes
Montgomery College
Rockville, Maryland
Bachelor of Science - Computer Science
University of Maryland
Hyattsville
Skills
Web content management
Knowledgeable in web application security vulnerabilities like XSS, CSRF, and RCE
Network penetration testing vulnerabilities
Virus and spyware removal
Testing System checks and troubleshooting
Excellent communication skills and works well with a team
Accomplishments
Ranked #17 Globally For The Google VRP Program On Their Current Rankings At The Google VRP Website.
Ranked The #1 Researcher For The Google VRP Program For The Year In 2019.
Ranked #9 on the MSRC Top 100 Security Researchers Of The Year in 2020.
Ranked #3 in 2019 on the MSRC Top 100 Security Researchers Of The Year in 2019.
Ranked #4 in 2018 on the MSRC Top 100 Security Researchers Of The Year in 2018.
Listed on Microsoft's Security Researcher Acknowledgements Page and Honor Roll over the course of multiple years/months for reporting security vulnerabilities.
Got invited to numerous private Google events for my previous work with them through their VRP program.
Recognized by Google and Microsoft as a top security researcher for the year of 2017.
Recognized by Bugcrowd as a VIP researcher for the year of 2016 and a MVP researcher for the year of 2017.
Listed on other companies Hall of Fame's including but not limited to Sony, AOL, AT&T, Spotify, Sellfy, and Indeed for reporting security vulnerabilities.
Wrote a bug bounty guide to inform and teach others how to participate in them successfully.
Listed on the Principal's List and Honor Roll multiple times in high school and at Montgomery College for excellence in academics.
In 2013 received an award as a top student in geometry.
Inducted into Phi Theta Kappa National Honor Society in 2016 for excellence in academics.
References
Eduardo Vela Nava, Product Security Response Team Leader/Manager at Google, email: evn@google.com
Jan Keller, Security Technical Program Manager At Google, email: jakl@google.com