Lots of updates

2026-03-18 23:32:45 -04:00
parent 0e19326bcb
commit b202ec9954
33 changed files with 4312 additions and 648 deletions
--- a/paul-halvorsen-resume.md
+++ b/paul-halvorsen-resume.md
@@ -1,103 +1,123 @@
 ---
 name: Paul Halvorsen
-keywords: rust, cargo, python, c, docker, containers, TDD, test driven development, pytest, CI/CD, JavaScript, JQuery, PHP, MySQL, rest, API, JSON, XML, git, GitLab, nginx, remote, testing
+keywords: software engineer, python, golang, rust, java, c, javascript, docker, kubernetes, aws, ci/cd, testing, rest api, mysql, distributed systems
 left-column:
-    - 'Sr Software Developer'
-    - 'Email: [paul.halvorsen@pm.me](mailto:paul.halvorsen@pm.me)'
-    - 'Phone: +1-410-236-4665'
-    - 'Last Updated: \today'
+    - "Email: paul.halvorsen@pm.me"
+    - "Phone: +1-410-236-4665"
 right-column:
-    - 'Personal Blog: [https://flow.halvo.me](https://flow.halvo.me)'
-    - 'LinkedIn: [www.linkedin.com/in/paul-halvorsen](www.linkedin.com/in/paul-halvorsen)'
-    - 'Git Repo: [https://git.halvo.me/paul](https://git.halvo.me/paul)'
-    - 'Citizen of the United States'
+    - "GitHub: github.com/malwhile"
+    - "LinkedIn: linkedin.com/in/paul-halvorsen"
+    - "Blog: flow.halvo.me"
+fontsize: 10pt
+fontenc: T1
+urlcolor: blue
+linkcolor: magenta
+numbersections: false
 ---

-# Summary
+## Summary

-I'm a Software Engineer with over 14 years development and 18 years professional experience, with exposure to Rust, C, Python, PHP, Go, JavaScript, Java, and C++ languages; various SQL DBs; tokio, JQuery, and Pytest frameworks; Docker and GitLab CI/CD; and Rest API, NATS, JSON, XML, and nginx technologies.
+Software engineer with 15+ years of development experience building scalable systems and applications. Expertise in Python, Go, Rust, Java, and C; REST APIs; database design; and performance optimization. Experience across infrastructure, backend systems, and full-stack development. Strong foundation in automated testing, CI/CD pipelines, and distributed systems.

-# Work Experience
+## Technical Skills

-## Binary Defense
+**Languages:** Python, Go, Rust, Java, C, C++, JavaScript, PHP

-**Sr Software Engineer**: April 2022 - Oct 2025
+**Databases:** MySQL, SQLite, Postgres

- - Rust development including: tokio (test), reqwest, anyhow, serde, windows, cargo, cmake, and WIX
- - Python development using pyenv, pipenv, cython, docker, GitLab pipelines, and static compilation
- - Develop security alarms for Windows, Linux (Debian and RedHat), and MacOS: Event driven by Windows Events, file and directory updates, and network connections
- - Written RFC and ADR to drive design and decision making on project direction
- - Design and build encrypted SQLite DB (configuration and cache), network containment, and secure key exchange and authentication
- - Design and build HTTP and NATS Rest API for receiving configuration (JSON) and sending data to backend servers and Microsoft Azure
- - Aid in distributed deployment to dozens of customers with hundreds of endpoints
+**Infrastructure & Tools:** Docker, Kubernetes, AWS, GitLab CI/CD, Git, Pytest, automated testing

-## Kyrus Tech
+**Specializations:** Systems programming, API design, performance optimization, security, TDD

-**Sr Software Engineer**: Nov 2020 - April 2022
+## Experience

- - Perform test driven development: C, Python/Pytest, Docker, GitLab CI/CD, Ghidra
- - Build covert communications and file transfers proxy: HTTPS, Apache Thrift, Rest API
- - Design compact router fingerprinting and vulnerability analysis: Android, TCP/IP, StreamCypher
- - Modify C code to suppress system logging in various Linux Kernel versions
+### Abnormal AI
+**Software Engineer** | \resumedate{**January 2026 – Present**}

-## Parsons
+- Microservices and data aggregation systems serving customers across US, EU, and government regions
+- Python and Go backend services; REST APIs and data processing pipelines
+- Kubernetes infrastructure: 10 auto-scaling clusters in AWS
+- Real-time and long-term data management; aggregation pipelines for efficiency
+- Performance optimization through compression and smart scaling strategies
+- Cross-team collaboration in monorepo environment
+- Team of 5 engineers delivering features and platform reliability

-**Cyber Security Software Engineer**: Apr 2018 - Nov 2020
+### Binary Defense
+**Sr Software Engineer** | \resumedate{**April 2022 – October 2025**}

- - Develop covert Windows application: C, C++, Python
-    - Build modular solution for plugin architecture and distributed deployment
-    - Design custom API for minimal communications on limited bandwidth
-    - Encrypt storage and comms using AES shared key to maintain confidentiality and integrity
- - Build back-end service for file storage and search: Java, Tomcat, NiagaraFiles (NiFi), nginx, Hadoop, MySQL, LDAP, RBAC
-    - Create API for uploading files via web interface or CLI
-    - Generate metadata for searching
+- Applications protecting thousands of Fortune 500 company endpoints across Windows, Linux, and macOS
+- Rust development: tokio, cargo, cross-compilation, unit testing
+- Python microservices: REST APIs, event aggregation, data pipelines
+- Performance optimization: reduced CPU 90%, memory 60%, network traffic 80%
+- Encrypted SQLite databases and secure key storage
+- GitLab CI/CD pipelines with Docker (Linux/Windows) and VM testing
+- Public key pinning and certificate transparency for secure API design
+- Designed RFCs and architecture decision records driving technical direction

-## NSA
+### Kyrus Tech
+**Sr Software Engineer** | \resumedate{**November 2020 – April 2022**}

-**Security Software Engineer**: Nov 2011 - Apr 2018
+- Test-driven development: C, Python/Pytest, Docker, GitLab CI/CD
+- Covert communications proxy: HTTPS, Apache Thrift, REST APIs
+- Router fingerprinting and vulnerability analysis on Android platforms
+- Linux kernel modifications for system monitoring

- - RedTeam DevOps development of browser enumeration, manipulation, and exploitation: PHP, JavaScript, JQuery, CSS, Python, MySQL, Java, Apache, Tomcat, Linux, Windows, Chrome, Firefox, Safari, IE, Edge
-    - Design Rest and JSON API to transfer data between targets, server, and UI
-    - Distribute covert JavaScript to targets across US government networks for enumeration and exploitation
-    - Design front-end to provide a dynamic UI with real time target data, graphs, and charts
-    - Design MySQL database to hold and quickly query enumeration and exploitation data
- - Advise and develop vulnerability mitigation strategies for various military and government customers
- - Train and provide SOPs to NSA RedTeam operators for various tools
+### Parsons
+**Cyber Security Software Engineer** | \resumedate{**April 2018 – November 2020**}

-**Systems Engineer**: Sept 2009 - Nov 2011
+- Modular Windows application in C, C++, Python with distributed plugin architecture
+- Custom API design for minimal bandwidth communications
+- AES-encrypted storage and communications
+- Backend file storage service: Java, Tomcat, NiFi, nginx, Hadoop, MySQL, LDAP, RBAC
+- File upload APIs and metadata generation for search functionality

- - Deploy, maintain, and monitor 30+ systems with 130+ Red Hat Enterprise Linux (RHEL) servers: LDAP, DNS, Apache, NiFi, Hadoop, Apache, Puppet, DHCP, PXE
- - Develop and deploy monitoring, reporting, and issue correcting scripts: Python
- - Organize, train, and participate in team performing 24x7 call-in rotation
- - Responsible for 5+ domestic and foreign system deployments
+### NSA
+**Security Software Engineer** | \resumedate{**November 2011 – April 2018**}

-## Salisbury University
+- Browser security platform: PHP, JavaScript, jQuery, Python, MySQL, Java
+- REST and JSON APIs for data transfer between targets and backend servers
+- Dynamic UI with real-time data visualization, graphs, and charts
+- MySQL database design and optimization for enumeration and exploitation data
+- Vulnerability mitigation strategies for military and government customers
+- Training and documentation for operators and developers

-**Software Developer**: Nov 2006 - May 2008
+**Systems Engineer** | \resumedate{**September 2009 – November 2011**}

- - Funded through the Wallops Flight Facility (NASA)
- - Provide simplified UI and scenario builder for the Satellite Tool Kit (STK): Managed C++
- - Design risk assessment scenarios for launch vehicles and UAVs over the DELMARVA peninsula
- - Collaborate with Geographic Information Science (GIS) for mapping
+- Deployment and maintenance of 30+ systems with 130+ RHEL servers
+- LDAP, DNS, Apache, NiFi, Hadoop, Puppet, DHCP, PXE services
+- Python monitoring, reporting, and issue correction scripts
+- 24x7 call-in rotation rotation coordination and team training

-**Lab Administrator**: Sept 2007 - May 2009
+### Salisbury University

- - Support Math and CS departments at SU
- - Maintain the Linux labs on campus: dual boot OpenSUSE, WindowsXP, and OpenSUSE server
- - Perform backups, updates, user management (LDAP), disk quotas, and remote access
+**Software Developer** | \resumedate{**November 2006 – May 2008**}

-# Education
+- Simplified UI and scenario builder for Satellite Tool Kit (STK) in Managed C++
+- Risk assessment scenarios for launch vehicles and UAVs
+- GIS collaboration for mapping and visualization

- - **University of Maryland Baltimore Campus**: Masters in Computer Science; 2013. Thesis: "Stateless Detection of Malicious Traffic: Emphasis on User Privacy"
- - **Salisbury University**: Bachelors in Computer Science, Minor in Math; 2009. Magna Cum-Laude
- - **Security+** (Expired): ID: COMP001021281239; Exp Date: 04/04/2024
- - **Royal Military College (RMC Canada)**: Training in OpenBSD development and administration
+**Lab Administrator** | \resumedate{**September 2007 – May 2009**}

-# Miscellaneous
+- Linux lab maintenance: dual boot OpenSUSE/WindowsXP, server administration
+- Backups, updates, user management (LDAP), disk quotas, remote access

- - **RedBlue Conference**: Presented combination web enumeration/exploitation tool
- - **National Conference for Undergrad Research (NCUR)**: Presented development of STK scenario building and manipulation
- - **SANS Courses**: Staying up-to-date on security research
- - **Homelab**: Proxmox running test VMs, email, cloud storage, gitea, DNS, multimedia, genealogy, and static web pages
- - **Web Admin for PTA**: Setup and maintain WordPress pages, calendar, and blog
+## Open Source & Personal Projects

+- **testct & ctclient** (Rust) – Certificate Transparency testing and monitoring tools
+- **sjles-pta-vote** (Go, TypeScript, React) – Full-stack community voting platform
+- **baseball-nn** (Python) – Machine learning project with neural networks
+- **date-scanned-pics** (Python) – EXIF metadata utility for photo organization
+
+## Education
+
+- **Master of Science, Computer Science** – University of Maryland Baltimore County (2013)
+  Thesis: "Stateless Detection of Malicious Traffic: Emphasis on User Privacy"
+- **Bachelor of Science, Computer Science** – Salisbury University (2009)
+  Magna Cum Laude
+- **Royal Military College (RMC Canada)** – Training in OpenBSD development and administration
+
+## Additional
+
+- Presentations: RedBlue Conference (web enumeration/exploitation), NCUR (STK scenario development)
+- SANS courses for current security research
+- Homelab: Proxmox virtualization, email, cloud storage, DNS, multimedia, genealogy, web services