Curriculum Vitae

Alexander Slesarev

Calgary, AB | XXX-XXX-XXXX | alex.slesarev@gmail.com | https://nuald.blogspot.com

Software Engineering Technical Leader - Cisco Meraki | 2021 - present

  • Assisting in deployment and optimization of Secure Threat Services ecosystem (Snort, Talos Intelligence integration, Click, C/C++, Lua, Go, Python, Ruby, Redis).

  • Extend and redesign MX Security Features (AMP, STS) to work in IPv6 and mixed IPv4/IPv6 networks (Click, C/C++).

  • Extend and redesign MX Security Features (STS, NBAR) to efficiently work on high-end MX appliances having multi-core Click (lockfree algorithms, Click, C/C++, Lua, Go, Rust).

  • Upskilling the company employees and new hires on MX Security Features, Click configuration, cryptography (including FIPS and PCI certification) and performance optimizations.

Lead Software Development Engineer - NuData Security/Mastercard | 2014 - 2021

  • Designed and created a codegenerator for the shared classes and enumerations (Go, Java, JavaScript, Python, Objective-C, Swift, Gradle/Groovy, ANTLR4, JSON, YAML).

  • Created mobile SDKs with the biometrics monitoring features (iOS, Android, UWP).

  • Created SDKs to communicate with the analytics servers (Python, JavaScript, Perl, REST).

  • Created a cryptography core of a custom 3DS SDK (TypeScript/JavaScript, JWT, ECDH-ES, X.509).

  • Assisted in developing the analytics engine used for monitoring and preventing malicious activity against web endpoints (PHP, Python, MongoDB, Cassandra, Redis, HDFS/S3, OpenAPI).

  • Supervised the security certification of mobile 3DS SDKs (iOS, Android, NIST SP 800-22).

  • Improved the development environment tooling (Java, Ruby, Python, Go, AsciiDoc, Docker).

  • Upskilling the team members on cryptography and operating systems internals.

Team Lead/Software Developer - Fortinet | 2011 - 2014

  • Embedded Python language into FortiGate and FortiAnalyzer (C/C++, Python, Cython).

  • Assisted in developing and performance tuning of FortiGate JSON API (C/C++).

  • Assisted in developing FortiGate WebUI (C/C++, Python, JavaScript, Cython, Jinja, Django).

  • Assisted in fixing security vulnerabilities like CSRF, XSS, DDOS etc (C, Ruby, Metasploit).

  • Improved the development environment tooling (Python, Jenkins, Gerrit/Git).

  • Improved the hiring process by introducing the written tests and levels of complexity.

Project Manager/Lead Software Developer - Elena Engineering | 2004 - 2010

  • Designed and created a teleconferencing system (C++, Qt, FFmpeg, UDP, RTP/RTCP).

  • Created a management plane for a Rapidly Deployable Network System (C#, C++, CC EAL 4, FIPS 140-2, SNMP, SOAP, VoIP, PSTN, QoS, PoE, WAP).

  • Created an EPOC32 (Symbian OS) PDA management system (C++, MFC, TFTP).

OPEN SOURCE PROJECTS

Comments

Post a Comment

Popular posts from this blog

Web application framework comparison by memory consumption

Memory consumption is slightly specific to my area of software development now, but I did some research recently and maybe these results can be useful for others. Of course, I know that precious comparison is very difficult to carry out, but actually I needed only overall picture. And let me admit that results are pretty interesting and even frustrated (at least for me). As a basis I took so-starving project, and measured initial RSS (Resident Set Size) of the each process (local development webservers). Platform: x86_64 Linux (latest Ubuntu with all updates). As a reference, here is the RSS of the interpreters in interactive console mode: Interpreter Version RSS (kB) stackless python 2.6.4 3916 ruby (via irb) 1.8.7 4664 python 2.7.1 5624 php 5.3.5 6924 v8 (via node.js shell) 2.5.9.9 8796 One more reference - the most simplest WSGI app ( example  in the Python documentation). It's RSS: 7336 Kb , so I assume it's almost impossible to consume l
Read more

Trac Ticket Workflow

Trac is the wiki and issue tracking system that is the most used for my software development projects. Let me share few hints about its ticket workflow, especially about the statuses, the roles of the participants, and let me give an example of the workflow config. But if you are interested in other things like Trac plugins, source browser, customizing, etc, let me know. All the information given below regards the workflow described at the end of the article. The original Trac workflow is missed vital features like the support for ticket verifying, or the required ticket statuses range, so I do not use it in my projects. The description of the main statuses: new - the ticket has been created; in-progress - the developer has began to work with the ticket; fixed - the ticket is fixed (the problem issued in the ticket is solved); verified - the ticket is verified (tester or PM has verified that the ticket is fixed correctly); closed - the ticket is closed (it's not
Read more

Shellcode detection using libemu

Shellcode can be seen as a list of instructions that has been developed in a manner that allows it to be injected in an application during runtime. Each security researcher face the shellcodes during their work, and in this article I'll show how to detect shellcodes using Python (via libemu Python binding). Few words about libemu : libemu is a small library written in C offering basic x86 emulation and shellcode detection using GetPC heuristics. Intended use is within network intrusion/prevention detections and honeypots. The information on the site is not actual in some places, so I'll give direct and clear instruction how to get and install libemu. Clone the git repository: $ git clone git://git.carnivore.it/libemu.git Firstly, configure, make and install libemu itself (without binding): $ autoreconf -v -i $ ./configure --prefix=/opt/libemu $ make $ sudo make install If you set up prefix as shown above, you have to add the library path to /etc/ld.so.conf file
Read more