Munich, Bavaria, Germany
Software Developer and Reverse Engineer for various platforms. My primary interest is the development of reverse engineering tools that simplify the analysis of binary files. Specialties: - Programming Languages: C++, Java, C#, x86 assembly - Reverse Engineering: IDA Pro (including plugin development), SoftICE, OllyDbg - Binary Analysis
Engineering manager on the Android Security Team which covers anti-malware research and operations, on-device anomaly sensor networks, user-facing functionality like Find my Device, some security-related developer APIs, the Google Play Security Rewards Program (bug bounties), and the Application Security Improvements program (mass-vulnerability detection and fixes for apps on Google Play).
In my role as manager of Android's anti-malware team, I am responsible for protecting about one billion Android devices from potentially harmful applications. With the help of my team, I keep up to date on potentially harmful applications and direct the team to mitigate present and future harm from users and devices. I am also responsible for privacy- and security-related warnings shown to Android application developers in Google Play.
Originally hired as an individual contributor by the Android Security team, I became technical lead and manager of Android's anti-malware and application scanning effort after two and a half years.
I worked as a contractor on the Microsoft Active Protections Program (MAPP) integrating support for Adobe PDF and SWF vulnerabilities into the MAPP program. During my time on this project, I performed root cause analysis of nearly 100 software vulnerabilities in Adobe products and wrote vulnerability reports that were distributed to MAPP partners. These reports were used by partners to add vulnerability detection to their products (like anti-virus software or intrusion detection software).
In my role as lead developer of three of the five zynamics products (BinNavi, BinCrowd, PDF DIssector) I was responsible for product development (both setting the strategic goals and actually writing the code), product launches, customer support, and marketing (PDF DIssector only). zynamics was later acquired by Google.
Taught introductory C++ classes to 4th semester students
Taught introductory Java classes to 1st semester students
- Developed an internal JSP/Java Servlet/SVG application to evaluate company performance - Developed a custom Apache Tomcat Realm to synchronize login information between an Oracle DB and an Apache Webserver