Experience Developer Security Testing .Net Years

Ronghua (Jeff) Xu

646-***-****

*******@*****.***

Summary

Two years experience in .Net and testing Microsoft product, good at Black-

Box manually testing, but now focusing on system level debugging by using

Windbg and IDA pro. Familiar with variable network attacks. Now using

Python as my main tool, pursuing Program development or security-related

jobs for future.

Skill Key Words

C#, .Net, Assembly, Python, Visual Studio, SQL Server, MySQL, SVN, Virtual

machine product (vMware,virtual box), NMAP, Metasploit, Windows, Linux,

Iptables, IDA pro, Windebug

Native Chinese Mandarin Speaker

Professional Experience

Workman Publishing

2011 - Present

IT Support/Help Desk

Establish and maintain the wired, wireless and AP network in the office

Troubleshooting the software such as MS office, QuickBooks, Act Sage and

etc.

Responsible for the maintenance of the office assets, such as Copiers,

Printers, Servers and workstations, also the DHCP, VPN, Network Security,

Active Directory and etc.

Setup internal ticket system to improve client satisfactions

Experience for Windows, MacOS and Linux

HiSoft Technology International Limited 2008

- 2010

Developer/Tester/QA

Managed development of specifications to create and execute detailed test

plans and verify bug fixes

Assured test data and scheduled automated/manual tests

Responsible for Global Localization testing in Visual Studio 2010 and

Application Virtualization

QA analyst for Windows 7, tracking the bugs and being the bridge between

Microsoft and testing team

Participated in the manual function, globalization and localization testing

of Adobe Autodesk

Responsible for designing and implementing system modules by using

C#&ASP.NET

Preparing status report and progress report of overall team

Participated in evaluation and testing of new tools and technologies

Academic Experience

Cyber Security Club of NYU

Security Researcher

2011 - Present

Experience in Linux and command line

CTF(Catch The Flag) Competitor

Simulate Man-In-The-Middle and ARP attack in the lab

Basic code auditing on the specific fields such as XSS, SQL injection and

etc.

Experience in the configurations of IPTables, firewall, SELinux and

AppArmor on Linux

Writing a Turing-Complete sandbox and Online real-time chat Chrome App

(iComment on Github) by using WebSocket with Python

Penetration Testing on Computer Exploitation by using Metasploit, Netcat,

Nmap and Nessus

Concept of RSA, PKI, VSN and Access Control

Vulnerability analysis such as stack overflow, /GS stack cookie, SEH &

SafeSEH, DEP and ASLR

Education

Polytechnic Institute of New York University, United States - 2013

M.S. Cyber Security

Major GPA: 3.54/4.0

Liaoning Technical University, China - 2009

B.S. Software Engineering

Major GPA: 3.71/4.0

Contact this candidate