Jeremiah Blatz
New York, NY 10016
***@*************.***
Education: Carnegie Mellon University, 1997
B.S. in Human-Computer Interaction (Self-Defined)
Minor in Computer Science
Programming Languages: Expert (several years' experience, several large projects)
PHP, Python, Oracle PL/SQL, C, Perl, JavaScript (incl. AJAX), HTML, Director Lingo
Experienced (about a years' experience, medium projects)
C#/ASP.NET, XML/SOAP, Java, Pascal, ASP/Visual Basic/VB Script, CSS, XML, HyperTalk
Working Knowledge (small projects)
C++, Microsoft T-SQL, tcsh, discrete electronics, PIC assembler, SM/NJ, COBOL
Applications: Expert
HTTP, Photoshop, Illustrator, Oracle, CVS, MS Access, After Effects, Premier
Experienced
Apache, BURP Suite, Ethereal/Wireshark, MS Visual Studio, TCP/IP, Macromedia Director, MS Visual SourceSafe, ipchains, Word, Excel
Working Knowledge
DNS, MS SQL Server, SMTP, Ethernet, Lotus Notes, Cyrus
Project Management:
Durations up to and over 6 months
Valuations in the millions of dollars
Myself and 2 to 7 people
Examples:
I managed the design and development of a tax data collection application at
Interpublic. The project team was myself, two contract junior developers, and a
contract designer. I was responsible for most client interaction, architecture
and design, and personnel management and assignments. I also did the database
and back-end development.
I managed the development of the Monster.com integration at Community Connect,
including timelines, resource allocation and management, specification development,
and technical coordination with the Monster.com team. The project took a little
over 6 months, and I was responsible for the management of three other people
at Community Connect. I also made a significant development contribution.
At MAYA, I was in charge of overall management of the Muybridge 360 project.
Although this project was only about a month long, it was very complex. We had
a tight, hard deadline and a very complex deliverable with lots of interacting pieces.
The team of 8 people worked all day, every day to get it done, and we were
working up to the last hours. I was in charge of the overall project and how all
the components fit together. In this role, I allowed each project member to focus
very narrowly on their individual part, which allowed them to be phenomenally
productive. I also filled in any gaps in the project team, working on serial
communications, optics, and software aspects of the system.
Computer Security:
Code Reviews, Web Application Penetration Testing (SQL/HTML/Script Injection, Request Forgery,
Authentication Bypass, Session Hijacking, etc.), Protocol Design and Analysis, Authentication System Design
and Analysis, Firewalls and Networks, Intrusion Detection and Forensics
UI Evaluation Skills: User Testing, Heuristic Analysis, Interviews, Contextual Analysis, Surveys, GOMS
Operating Systems: Unix
Use since 1992 (Linux, Darwin, Solaris, HP/UX, AIX)
Administration since 1995 (Linux, darwin)
MacOS
Use since 1986
Administration since 1991 (Versions 6.x - 10.4)
Windows
Use since 1993 (DOS, 3.1/3.1.1, 95/98, NT, 2000, XP)
Administration since 1996 (DOS, 3.1.1, NT, 2000)
Small Portfolio: http://www.jeremiahblatz.com/portfolio/
Work Experience: April 2007 - Present – Foundstone
Managing Consultant
I am a security consultant for, a Division of McAfee (now a part of Intel). In this role, I am responsible for managing project engagements, teaching others about web security, and performing security assessments, primarily on web and thick-client applications and networks.
Primary Responsibilities
Web application and thick client penetration tests
Project management
Teaching Ultimate Hacking: Web
Technical lead on the web application assessment service line
Maintainer of Foundstone s Ultimate Hacking: Web class
Significant Contributions
Citrix assessments
Mentoring new employees
External network penetration testing
December 2006 - April 2007 – Symantec
Principal Security Consultant
I am employed as a security consultant for the advisory
services group of Symantec. In this role, I am responsible for discovering
vulnerabilities in clients’ applications and networks, and advising in their
remediation. I work remotely and on client sites for a variety of large and small
clients.
Primary Responsibilities
Web penetration tests
Code reviews
Network penetration tests
Significant Contributions
Security process and architecture review
Advising clients on remediation
Security software development
Secure framework development
January 2005 - December 2006 – Interpublic Group of Companies, Inc
Senior Programmer Analyst
is a
collection of advertising agencies. I was a member of the 6-person team that developed and
maintained Interpublic’s intranet and public web site. The intranet serves
tens of thousands of Interpublic employees worldwide, and provides support for
cross-agency information sharing and corporate initiatives and procedures.
Primary Responsibilities
Application and database architecture
Front and back-end development in PHP, PL/SQL, and Perl
Data design in Oracle
Significant Contributions
Requirements gathering and documentation
Overall system architecture
Interfacing with clients and outside service providers
Web design
Other Responsibilities
Project planning
Small-team project management
September 2003 - January 2005 – Community Connect, Inc
Tech Lead, Senior Developer
(CCI) creates and maintains online
communities for US ethnic audiences. These sites,, Asian
Avenue, and are some of the most popular internet
destinations for ethnic communities. As Technology Lead for the
diversity recruiting (DR) department, I designed the software
architecture for DR projects, and ensured that the DR developers
produce high-quality code. I also performed the duties of a senior
developer, estimated development effort for DR projects, and
interfaced with clients and third party partners. Additionally,
I contributed to strategic company-wide development
initiatives, and was repeatedly praised for my attention to
business goals.
Primary Responsibilities
Application and database architecture
Front and back-end development in PHP, PL/SQL, and Perl
Mentoring DR developers
HTML, JavaScript, and ActionScript development
Data design in Oracle
Significant Contributions
Project brainstorming and definition
Interface design
Project scoping and management
Other Responsibilities
Leading code reviews for DR and other departments
Technical presentations to CCI development team
January 2003 - September 2003 – Ilios Partners, LLC
Programmer / Analyst
specializes in extremely accurate stock surveillance. In order to compete effectively
with their larger peers, they decided to move to a more full-featured IR package. Their
product,, allows IR professionals to manage their shareholder relationships,
view information on investors, and view the ownership information of their and other
companies’ stock. I was the primary frontend developer for irNavigator.
Primary Responsibilities
Front-end development
Application security
Significant Contributions
Visual and information design
Project management
Other Responsibilities
Middleware architecture
Database design
Network architecture
T-SQL Development
Network and Infrastructure Security
In developing IRNavigator, I was asked to pay careful attention
to perceived application performance. Ilios wanted its site to
feel significantly faster than its competitors' sites. This posed
significant difficulties, given the design of the ASP.NET
framework. I designed and implemented many solutions to increase
application interactivity, using low-level details of ASP.NET,
existing browsers, and TCP/IP. The site is built with C#/ASP.NET
against MS SQL Server and a proprietary DB cache backend.
June 2002 - present – Freelance Work
Heuristic Evaluation of a hosted application for ProductSoft
Electronic and mechanical design for a computer input device (client confidential)
Designed and built web site for
Client was unhappy with its current web site, as it was
hard for users to navigate and hard to maintain. The
company that provided Smith-Thompson’s inventory/accounting
software provides an e-commerce framework that ties in
with the software, but Smith-Thompson was dissatisfied
with the web sites that were provided with the framework.
I worked with Smith-Thompson to create a web site that
projected the image that the owners wanted, and that
made shopping an easy and pleasant experience for their
customers. I then built the site, enhancing the
functionality and security that the framework provided.
The site is built using "classic" ASP. Currently I am
providing some support services for and small enhancements
to the site. A small case study available at
www.jeremiahblatz.com/portfolio/rrgifts.)
November 1997-July 2002 – MAYA Design Group
Interaction Designer/Systems Engineer
MAYA is a consulting firm that does both commercial product design
and government-sponsored research. Notable projects included:
Wrote a database indexer
Under a DARPA contract, MAYA has been developing an object database that overcomes many
of the problems traditionally associated with object databases. I architected and built
an indexer for this database. The indexer allows fast lookups on fine-grained data
structures, and features fast updating when the indexed data changes. I developed the
indexer using Python on Linux and Solaris.
Office Security Expert
Designed and implemented authentication systems for web applications. Audited security
measures in existing systems, and suggested fixes. Steered the development of DARPA-funded
distributed information systems so that they could be made to function in a hostile
environment. Upgraded company's network and host security measures.
Managed internal automation projects
Managed projects to move internal records online. Designed and built online applications
for timesheets and labor forecasting. Lots of data modeling. Hired, trained, and managed
an employee to do routine maintenance and implementation. Used a variety of tools and
platforms, including Perl, Python, and VB on Linux, NT, and Solaris.
Led the award winning "Muybridge 360" project
Managed a high-pressure, short-deadline, resource-tight project to create a smashingly
successful exhibit piece for a Pittsburgh film event. The installation consisted of a
circular room surrounded by $20, Barbie-branded digital cameras. The device would
photograph the participant, then produce a Matrix-style flipbook for them. The digital
cameras were connected through custom-designed electronics to a Linux box (chosen for
rapid development speed) for processing, then the images were sent to a Windows machine
to be printed. I took the project from idea to on-site installation in one month. The
project had architectural, electronics, software, and optics components, and loads of
systems integration. In addition to managing and coordinating, I was responsible for
most of the integration, designed the optics system, broke though show-stopping barriers
in the electronics design, worked on the software, and generally filled in any gaps.
This project involved the use of VB, Python, and electronics, among others. MAYA's
web page about the project is available at:
http://www.maya.com/web/what/clients/what_client_filmmakers_360.mtml
Other responsibilities included:
Design and prototyping for public and internet web sites, kiosks, and stand-alone applications
Project management on commercial and government projects
Production coding for public and intranet web sites (HTML and CGI)
Determining project requirements with clients
Documenting software systems
User testing and other interface evaluation
1997 – Carnegie Mellon University Department of Design
Systems Administrator
Maintained hardware and software for 50 Macintoshes and 5 Windows NT machines. Installed LAN for 20 machine design studio.
1995-1997 – Carnegie Mellon University Institute for Complex Engineered Systems
Designer/Programmer
Designed and implemented wearable computing system with a team of designers and software engineers.
Honors etc: : User interface for fire detection system
Muybridge 360 – ID Magazine Annual Design Review 2002 Bronze Medal
Certified in Axent/Symantec NetProwler
Africa Stik – 1996 Interval Research Corp. "Most Appropriate Use of Technology"
Efficacy of a Predictive Display, Steering Device, and Vehicle Body Representation in the Operation of a Lunar Vehicle – CHI '96