Software Security
Resume:
Roman Yaker - Brainbench: **rd percentile PHP
ablmeh@r.postjobfree.com
Last Modified: April 2010
Technical Skills
Hardware
Cobalt (ARM-based) systems
Sparc Workstations
SGI - Personal Computer compatible (x86) systems (VA Linux,
generic)
PowerPC, Macintosh, etc
StoreCase models / RAID systems
Dell servers/diagnostics
Snort-based firewalls
Operating Systems
Linux (all distributions) 11 years experience
Solaris / SunOS (all releases up to date) 10 years experience
System V (Release 4) 10 years experience
Berkeley Software Design (BSD) clones FreeBSD, OpenBSD, NetBSD
Digital UNIX
Microsoft Windows 95, 98, 2000, NT, 2k, XP, Vista, 7
Software (Unix & clones and Windows)
Sniffers & Protocol analyzers (snort, tcpdump, etc)
Firewalls ( ipfw / iptables / proprietary)
IDS (tripwire, snort, honey pots)
g++, gcc, and lib linking
vi / vim
rsync
Wu-FTPD, ProFTPD, VSFTPD, Scp
SSHD (1 & 2) - public authentication keys for seamless
authentication
POP, SMTP (smtp-programming), IMAP
BIND / NAMED (administration)
Apache 1.x & 2.x (administration)
MySQL (3.x-4.1, 5.x) (administration)
PostgreSQL (up to 8.x) (administration)
Oracle 10g
Sendmail (administration)
CVS (usage and administration)
Subversion (usage and administration)
Toad (for Oracle)
SQLYog
PgAdmin
Macromedia Studio CSx / Dreamweaver CSx
Adobe products / Photoshop CS3
Zend Development Environment (up to 7.1)
Eclipse (Europa + Aptana)
Oracle Reports and Oracle Reports Builder
Crystal Reports
Visio
Citrix
GoToMyPC products
Log me in products
Remedy
Programming Languages
C++ (intermediate) with databases
Perl
PHP
CSS
AJAX
JS Prototype / Prototype-ajax
jQuery
SQL (ANSI/ISO+)
SQL Procedural Languages (MySQL/PostgreSQL/MSSQL/Oracle 10g)
Shell programming (Korne, Bourne Again, sh, Csh)
HTML
XML / DOMXML
Rest / SOAP
Expect (typically for automating authentication requests)
Adobe AIR
Architectures
Smarty
Symfony
Zend Framework
Model View Controller methodology
Featured
Member, Birmingham-Infragard (FBI-directed security conference meetings)
co-founder of 2600, Birmingham, AL
Interviewed by New York Times (2001) newspaper print.
Available online at:
http://query.nytimes.com/gst/fullpage.html?res=9B06EFDD1439F934A3575AC0A9669
C8B63
Biography written by Global Network Privacy CEO, Bob Stanley
Available at:
http://www.romanyaker.com/mat/rybio.html
Security article written for Insinc Corp., published on hr101
Available at:
http://www.hr101.com/spotlights/techsecure.html
Received 5.0/5.0 on technical expertise, and in other categories GDIT
review
Professional Experience
June 2008 - Present :: General Dynamics (GDIT ) for the US Navy (Senior
Engineer, Software)
Wrote technical papers summarizing characteristics of technologies
perceived as needed in future development. Papers used as
consideration during development of such technologies.
Requirements-gathering, project-outlining and design, and project
implementation
Refactored existing code to reflect industry standards
Provide direction on and take part in the development of bleeding-
edge Web software.
Program in a variety of languages and Oracle 10g grid database(s).
Sole developer and architecture designer of robust applications.
Lead team member in team projects.
Take part in multiple projects simultaneously
July 2007 - June 2008 :: Learning By Grace, Inc ( Senior Developer )
Company facilitates complete learning experience to home schoolers
from kindergarten to 12th grade. Provides learning management
system (LMS) other management systems and tools and resources.
Wrote quality assurance plans and guidelines.
Wrote technical documentation
Wrote technical guides
Wrote technical troubleshooting documents equipped with screen
shots and step-by-step instructions on resolving technical issues;
developed for customer release
Tier 3 Technical Support lead
Conducted last-resort troubleshooting phone calls with clients
Lead team of 6 programmers in developing new software that
facilitates Learning Experience and maintain legacy software.
Use MVC architecture
Designed and oversaw complete overhaul of legacy software
Implemented rsync between 4 servers to sync software
Implemented and managed subversion on client computers and on
servers for version control, with over ten repositories
Wrote expect scripts to automate interactive authenication for
cross-network rsync
PHP, perl, mysql procedural language, shell, and expect scripting
March 2007 - July 2007 :: Emageon (contract)
Company uses DICOM solutions for the medicine industry.
Developed applications in Perl and Shell scripts to
programmatically retrieve misplaced object files. Scripts check
object integrity, transport to proper location, and automate the
writing of hundreds of pages of human-readable as well as computer
formatted reports.
May 2006 - March 2007 :: Marketing Solutions. Inc
Company provides CRM solutions to banks and credit unions in the
United States.
Developed UNIX-based C++ application facilitating PDF document
merging with database information to streamline printing process at
company print shop.
Developed a number of BASH shell scripts to facilitate Point-in-
Time-Replication (real-time database backup) with multiple
databases sending Write-ahead Logs (WALs) to a central remote
backup server.
Writing Perl scripts to fit needs of various existing applications'
database usage maintenance.
Developed web-based Integrated Survey Tool. Allows for a complete
survey to be designed, implemented, completed, and produce
perspective-variety reporting.
Utilize database procedural language daily
Writing design documents
Writing technical overview and documentation
July 2005- March 2006 :: Cyber Venture Technologies, LLC
Sole PHP developer of software facilitating sale of legal and
business forms and agreements online.
Development included intrusion detection systems in place to
protect server from hackers. Extreme caution in security during
programming of software.
Performed E-commerce, high-security-programming using only POST
method as any type of communication between user and server. No
outside data input allowed. Data integrity and sanity checks.
Programmed buffer control, which allowed users to download
documents without actually having access to them. Intrusion
detection systems were put into place for anti-hacking. Company is
now making a profit off sales.
Responsible for development of PHP Web software application to
facilitate virtual deals of Mergers and Acquisitions using a MySQL
backend.
Three-factor government-grade authentication schematic built into
software.
January 2005 to July 2005 :: University of Alabama at Birmingham (Director
of Technology, part time) WBLZ Radio station
Bureaucratic liaison for program funds and budget allocation, etc.
Wrote PHP applications to fit various automation needs for radio
listeners and DJs alike.
Targeted listeners via technical means for effective outreach by
attaining and calculating listener habits and/or requests, invoking
smart broadcasting, and other innovations.
Broadcast server maintenance
Performed technical implementations and recommendations that fit
agenda
Hired technical staff in which staff member skills may grow and
project development effectively prospers.
Oversaw compliance issues of the ever growing and changing
broadcasting guidelines and producing pro-active changes of station
operation that meet such guidelines.
March 2003 to July 2005 :: KickMail, LLC. (Developer / UNIX server
administrator)
Company provides e-mail marketing to warm market
Implemented multiple snort-based firewalls for network security.
Designed a number of security implementations in software as well
as algorithms for designated means.
Designed and implemented a custom bi server-client back up system.
-Designed dynamic help system.
-Performed software debugging.
-Product GUI design.
-Programmed in Javascript, PHP, SQL (MySQL).
-Performed MySQL server and SQL optimization.
-Kept eight Linux servers and network running smoothly, including
software installation, server software upgrades and server security
implementation.
-Leader in think-tank and have brainstormed, designed, and
implemented a large variety of software and working ideas for team
and individually.
-Performed online and over-phone tech support, last tier, as
needed.
May 2002 to September 2002 :: INSINC Corporation (Systems Specialist)
As System Specialist, my job concerned the well doing of customers'
systems, networks, hardware, and routers. On sight installation and
technical support, as well as by phone. This company offers
technical services to the Construction Industry. The job included
traveling to the various sights across the nation, reviewing
network diagrams to trouble shoot networks.
January 2001 :: Sellers Richardson Watson Haley & Logan, LLP (contract)
Programmed "Date Book" application (HTML, PHP, (MySQL) for use by
company employees and associates via the Web.
June 2000 :: Process Technology, Incorporated (PTI) (contract)
Designed and programmed online database for company inventory,
projects, and other criteria.
January 2000 :: Clickagents.com (CPC Marketing - merged, Value Click, Inc)
Consultant
Performed a network auditing series on servers. Secured exploitable
holes in system software running Solaris / SunOS. Consulted over
phone with IT manager and CEO.
May 1999 to December 1999 :: Global Network Privacy, Inc. (Lead
Professional/Technology Securities )
San Francisco-based firm specialized in Ultra-Secure Defense in
Depth and Secure Internet Application Service Provider (SIASP).
-Took an active role in system administration, network security and
penetration.
-Lead "Red Team" network security penetration and validation.
-Took lead in other projects utilizing high-end technology in
developing "intelligent avatars" later used as human interfaces for
technical Q&A, sales Q&A, etc.
-Presented information on technology and security implementations
and/or risks to COO, engineers, and members of partner company.
-Wrote technology advisories
Provided recommendations and open source direction
1999-2005 WiredFusion Internet Service Provider, Founder
New York based Internet Service.
Provided web and application hosting to general public
Sparc / Solaris based
1998 to 2003 ---Clik Interactive, Inc, www.clikinteractive.com (projects
contracts)
Freelanced in Web site creation.
Development included Javascript, HTML, and PHP programming for Web
applications.
Other
Black.Box.Sk Electronic Magazine, Founder
Wrote articles and tutorials on network and system security,
privacy, and administration, on being a "smart" network and system
administrator, on the security of systems and networks. Real-time
security/privacy Q&A Board. The magazine attracted and maintained
nearly 15,000 daily hits.
NewOrder.Box.Sk Software/Programming/Security guide
writing OS and network security and privacy advisories. Answer
questions daily, on UNIX (and clones) security, programming,
installation, and offered "newbie" help. The site now attracts
nearly 75,000 daily visitors.
Solaris.Box.Sk, Founder
offer help for Solaris administrators and new-comers alike. Offered
technical FAQs and articles on Solaris, SunOS, and System V UNIX.
Provided help on installing specific software, maintaining a secure
system, and other feats of Solaris, SunOS, and System V.
Collectively the box.sk network receives over one million hits
monthly.
Scores of other projects in programming, network and network security, open
source software releases, etc.
Languages (Spoken)
Russian (fluently)
Spanish (three years)
Brainbench Results for Roman Yaker
Test Takers Email:
ablmeh@r.postjobfree.com
Date Taken:
09-Mar-2006
Test Event ID:
ZX12992-2TG1KPJ5
Overall Score:
4.50
Weights:
100% PHP 4
Elapsed time:
21 min 2 sec
PHP 4
Score
4.50
Percentile
Scored higher than 93% of previous examinees
Proficiency Level:
Advanced (Master)
Demonstrates understanding of most advanced concepts within the subject
area. Appears capable of mentoring others on the most complex projects.
Contact this candidate