Resume: Michael H. Buselli

Employment

Principal (June 2008 – Present)

CosineWave Technologies Inc.
Client Reference: Dean Sellis (contact information on request)

Works as a self-employed independent consultant providing security expertise to clients and partners
Configures and troubleshoots IKE/IPSec VPNs
Automates business processes using Visual Basic for Applications (VBA)
Wrote custom JASS scripts in a Solaris 10 hardening project

Software Engineer (part-time, November 2007 – Present)

WhyGoSolo
7001 Loisdale Road, Suite C, Springfield, Virginia 22150, 571-921-4944
Reference: Ann Bernard (contact information on request)
Reference: Keith Casey (contact information on request)

Manages company's main Linux system and hosting provider accounts
Software development for main application using Ruby on Rails 2.0, RSpec
As a security expert, provides insights into application security and compliance issues
As an application developer, upgraded main application from Rails 1.2 to 2.0

Information Security Architect (July 2004 – July 2008)

CCC Information Services Inc.
222 Merchandise Mart Suite 900, Chicago Illinois 60654, 312-229-2200
Reference: Christopher Lewis (contact information on request)
Reference: Andrew Steingruebl (contact information on request)
Reference: Shannon Courtney (contact information on request)

Helped company achieve Sarbanes-Oxley compliance
Communicated customer security requirements to the business and documented business practices for customers
Reviewed architectural security and assessed prospective risk for company software releases
Coordinated with security vendors during third-party vulnerability assessments
Wrote secure web coding standards, based on OWASP, and train developers on application security issues
Scanned systems for network vulnerabilities with nCircle IP360 and worked with teams to mitigate standard OS vulnerabilities
Wrote business cases for projects to improve security
Used Snort and Sourcefire 3D with RNA to detect potentially malicious attacks that could threaten the enterprise
Provided technical leadership and assistance to Unix team

Senior Network Systems Specialist (May 1999 – July 2004)

Abbott Laboratories, Global Technology Solutions
100 Abbott Park Road, Abbott Park Illinois 60064, 847-937-6100
Reference: Clyde Anderson (contact information on request)

On team of thirty responsible for approximately 700 Unix hosts
Primary point of contact for forty-three Unix hosts including firewalls and Internet facing services
Responsible for drafting and executing project plans including requests for capital and non-capital expenditures
Held project responsibilities for system architecture and determining size requirements.
Participation in corporate wide operations security council that governed architecture and approval of firewall requests
Wrote scripts for completely automated Solaris Jumpstart (Bourne shell)
Wrote scripts for Sun auto-patch "boot net - patch" (Bourne shell)
Used Perl to write an enterprise software management script and maintain specialized NIS environment
Wrote a custom Samba VFS module in C
Lead several instructional sessions on "Topics in Unix" that covered scripting in shell and Perl, and introductions to various Unix programs

Systems Administrator (March 1998 – May 1999)

First Options of Chicago (subsidiary of Spear, Leeds, and Kellogg; now Goldman Sachs)
440 South LaSalle Street Suite 1400, Chicago Illinois 60605, 312-362-3000

On team of six responsible for ninety Sun machines
Managed Join DHCP/DDNS, configured partner connections with aspppd, and installed programming software for developers

Systems and Software Engineer (April 1997 – March 1998)

Spark Services, Inc., a subsidiary of Cendant
1603 Orrington Avenue Suite 700, Evanston Illinois 60201
Reference: Andrew Hatchell (contact information on request)

On team of four responsible for 65 Intel based computers (mostly OS/2)
Responsible for customer service and quality assurance applications, and credit card transaction batch processing systems

Computer Technician (October 1995 – June 1997)

University of Chicago
1116 East 59th Street, Chicago Illinois 60637, 773-702-1234

Unix Technical Computing Assistant (October 1995 – May 1997)

On team of two responsible for 20 SGI machines, two Sun machines
On team of about twelve partially responsible for 60 various other Macintosh and Windows machines
Lead cluster migration from one SGI architecture to another
Implemented Macintosh user authentication to Unix servers and a system that integrated the BSD printing system with MacOS and Windows

Resident Computing Coordinator (April 1997 – June 1997)

Sole individual responsible for one Sun server
Interviewed and hired Resident Computing Assistants, and acted as an emissary between university community and Resident Computing Assistants
Designed, recommended, and implemented improvements to dorm networks

Resident Computing Assistant (October 1996 – March 1997)

Sole individual responsible for six Macintosh systems
Provided connectivity support for dorm residents

Assistant Administrator (January 1997 – March 1997)

Partially responsible for five Windows NT systems

Technical Knowledge and Skills

Current and Recent

Languages: Ruby, Rails, Perl, Kornshell, C, VBA
Operating Systems: Solaris, Debian Linux, Red Hat Linux, OpenBSD, Mac OS X
System Software: BIND (unprivileged chroot), Sendmail, OpenSSH
System Support: Solaris Jumpstart, Solaris Zones, Red Hat Kickstart
Server Software: MySQL, Mailman, Procmail, Samba
Security Software: Sourcefire 3D, nCircle IP360, OWASP Webgoat, OWASP WebScarab, OpenSSL, GnuPG, OpenBSD isakmpd, KAME Racoon
Revision Control: Bazaar-VCS, Git, Subversion, CVS, RCS
Troubleshooting: tcpdump/snoop, Wireshark, lsof, truss, gdb
Compliance: Sarbanes-Oxley, PCI, HIPAA

Languages: Java, Scheme, REXX, x86 Assembly, 65C02 Assembly, C++, PL/SQL
Programming: Oracle Pro*C, Samba VFS module API, Natural Microsystems telephony boards and API
Operating Systems: IRIX, HP/UX, Tru64, OS/2 Windows NT
System Software: Join DHCP/DDNS, Postfix, Exim, qmail, aspppd, DTrace, NFS, NIS, NIS+, OpenLDAP, PADL pam_ldap, PADL nss_ldap
Databases: Oracle, Sybase
Middleware: Apache, Apache/mod_ssl, ProFTPD/mod_ssl, Tomcat
Firewall Software: Interlock, Raptor, smap, OpenBSD Packet Filter, OpenBSD authpf, IPFilter, Linux netfilter
Security Software: Network Flight Recorder, Shadow, Snort, SecurID, Tripwire, Osiris
Backup Software: Veritas NetBackup, Legato Networker, Amanda, Seagate Back-Up Exec
High Availability: Veritas First Watch
File Sharing: IBM LAN file server, Chameleon NFS, Network Appliance, Netatalk, Berkeley automounter
Printing: LPRng, BSD printing, System V print system, Ghostscript
Miscellaneous: Active Directory Unix integration, Microsoft Services for Unix
Compliance: FDA Regulations and Validated Systems

Professional Training and Conferences

Conference: Chicago NetSecure 08 (March 2008)
Conference: Chicago Tech-Security (March 2008)
Conference: RailsConf 2006 in Chicago, Illinois (June 2006)
Conference: OWASP 2005 in Washington, DC (October 2005)
Project Management (December 2002)
Red Hat Linux System Administration (December 2002)
Conference: USENIX Technical 2001 in Boston, Massachusetts (June 2001)
- Sendmail Configuration and Operation
- Basic Management Techniques
- Solaris Internals: Architecture, Tips, and Tidbits
Oracle Enterprise DBA Part 1A: Architecture and Administration (November 2000)
Netscape LDAP Server (June 2000)
High Performance Work Teams (April 2000)
Conference: USENIX LISA 1999 in Seattle, Washington (November 1999)
- Configuring and Administering Samba Servers
- Amd and Automounter Utilities
- Applications of Cryptography
- Computer Attacks: Trends and Countermeasures
Solaris Performance Tuning (July 1999)
Solaris 7 Administration II (July 1999)
Conference: USENIX LISA 1998 in Boston, Massachusetts (December 1998)
- Administering Windows NT: A Course for Unix People
- Printing with LPRng
- Administering Secure Web Servers
- Advanced Topics in DNS and BIND
Solaris 2.6 Administration II (May 1998)

Professional Associations

Certification: Certified Information Systems Security Professional (CISSP) from (ISC)²
Membership: USENIX and SAGE
Membership: IEEE Computer Society

Presentations and Speaking Experience

Web Application Security (CCC Internal, August 2007)
Chicago Area Ruby Group: Using Capistrano (February 2007)
UniForum Chicago: CVS (July 2002)
UniForum Chicago: Ruby vs. Perl (June 2002)
Series: Topics in Unix (Abbott Internal, August 2001 – December 2002)
Introduction to DNS (Abbott Internal, October 2000)
Introduction to TCP/IP (Abbott Internal, February 2000)
Using CVS (Abbott Internal, October 1999)

Education

The University of Chicago

1116 East 59th Street, Chicago IL 60637, 773-702-8650
Bachelor of Science, Mathematics

Miscellaneous

First place individual Junior in 1991 Rose-Hulman High-School Mathematics Contest
Captain and leader of first place team for programming in 1992 National GTech Computer Contest.
Home user of Linux since May 1994, OpenBSD since March 1998, and Mac OS X since December 2004.
Captain and leader of team in design of Java JDK 1.0.2 multiuser networking API, in 1997 prior to explosive proliferation of Java libraries. We designed a messaging framework for Java applets and servers to communicate with each other, and then used that framework to create a multi-user online game with chat.
Hobby of coding in Ruby and C.

Michael H. Buselli, CISSP

Overview