WHOAMI
Enthusiast, Linux first, software engineer, with over 10 years of experience, ready to passionately tackle any challenge that can be solved with a piece of code. I have a proven track record in developing cross-platform solutions and leading projects in C#/.NET, Python, and Rust.
Recently, I patented a protocol/algorithm that saves the Microsoft Security (MSEC) group tens of millions of dollars each year.
I am most skilled in: C#/.NET, Python, Rust, and Cross Platform Development.
Experience
Microsoft
Software Developer Engineer II @ Microsoft Security (MSEC)
May 2020 - Present
www.microsoft.com
Rust-based client in cross-platform domain:
- Co-led the design, development, and deployment of Microsoft’s first cross-platform Rust client.
- Introduced Rust to Windows OS and ensured MacOS and Linux compliance, achieving Microsoft-signed product status.
Domain leader in Microsoft Defender for Endpoint vulnerability management:
- Led the development of Threat Vulnerability Management’s various endpoint clients.
- Spearheaded the development of various scrapers/spiders for vulnerability feed collection.
- Led Hardware and Firmware detection research and design across all platforms (Windows, Linux, MacOS) using C++, .NET, and Rust.
- Owner of the normalization service, which was responsible for aggregating, learning, and defining Common Product Enumerations for MSEC services, maintaining high KPIs through CVE and CPE uniform naming.
Innovation in Solution Development:
- Designed and patented an alternative network protocol for data sync, saving Microsoft millions annually.
- Developed a Windows kernel and NTFS-based solution for efficient scanning (using MFT) and metadata collection from files of interest.
Key Contributions to Microsoft Defender for Containers Vulnerability Management:
- Deployed Rust-based binary, scrapers, and backend logic for comparison with Qualys.
- Enhanced support for developer package vulnerabilities, integrating GitHub Advisory vulnerabilities DB.
- Contributed Docker and Azure Container Registry specific code for layer and image analysis.
Addressing High Profile Vulnerabilities like log4j:
- Provided critical code and expertise for accurate Java software detection.
- Designed and developed detection and collection systems for various Developer Packages (Python, npm, NuGet, Java, Go).
- Led browser-extension collection and analysis.
Software Engineering Expertise:
- Proficient in implementing and refactoring complex codebases.
- Rapidly masters new technologies.
- Strong foundation in C#, Rust, and Python development with a commitment to continuous learning.
Large-Scale Product Development:
- Developed products to collect, parse, aggregate, mutate, and expose data from deployed Infinidat systems for customer and internal use.
Python Distributions:
- Created relocatable Python distributions for open-source use across multiple platforms and architectures.
Code Migration:
- Spearheaded code migration for multiple projects from Python 2 to Python 3.
Security Analyst:
- Analyzed network traffic and identified data patterns using Wireshark and tcpdump.
- Mastered Regular Expressions for pattern recognition.
Software Developer:
- Created a reverse engineering solution for malicious traffic detection using Python and C/C++.
- Developed big-data tools for network protocol profiling.
- Built automation infrastructure for web-platform services.
Full Stack Developer:
- Developed server-side API code using Java, Spring Framework, and Spring-Security.
- Worked on front-end development with AngularJS.
- Conducted comprehensive testing with Grunt, Protractor, and Selenium.
Software Developer (Telecom Team):
- Developed secure server-side API for large Telecom corporations using PHP5/Postgresql/Apache stack.
- Conducted testing with Junit and managed product lifecycle with Jenkins Pipelines.
- Developed server-side components with Python and managed deployment with Puppet.
- Orchestrated Postgresql clustering and replication for failsafe operation.
Product Development:
- Contributed to product development across multiple distributed virtualized platforms, including Gaia (Checkpoint Proprietary OS), Windows Server, and RHEL.
Education
Technion - Israel Institute of Technology
Industrial Engineering - Business Information Systems
2011 - 2016
Established in 1912 in Haifa, Israel, is the country's oldest university and a pivotal force in the fields of science and engineering.
During my time at The Technion, I learned most of my key skills that I have taken through my career, such as teamwork and working to tight deadlines. I thoroughly enjoyed my time at university and learned a lot about the latest technologies used in the industry.
Contributions
Patent
UPDATING A STATE OF A CLIENT DEVICE USING A LIMITED EVENT SIZE PROTOCOL
411583-US-NP · Filed May 26, 2022
Final Project
Gamification of Goal Recognition Design Problems
March 2016
Designing and implementing a Goal Recognition Design game to show the benefits of such algorithms. The GRD is an A.I problem set; algorithms that solve this problem set do so by reshaping the problem’s topology to optimize Goal Recognition algorithms’ performance. Developed with Java, JavaFX, and Android.
Volunteering
SII-The Standards Institution of Israel Central Committee Member
August 2020 - Present
- Member of the Central Committee for Technology and Information.
- Member of the Cyber Committee.
- Member of the Biometrics Committee.
All work and no fun makes Roy a dull boy
Alongside my interests in cyber security and software engineering, some of my other interests and hobbies are:
- Mountaineering and Hiking
- Playing classical music on the guitar
- Bachata Dancing
- Bouldering
- Boxing
- Gaming