Richie Lai

Objective:

  • A position that will utilize my technical expertise and management skills to lead software security direction within a company.
Capabilities/Experience:

    Worked with many OS/Software packages including but not limited to:

  • Apache/PHP/Perl
  • Microsoft IIS up to 6.0
  • Microsoft SQL up to 2005
  • 15+ years Windows up to Vista
  • 17+ years Unix/Linux
    Experience in the following Design and Programming Languages

  • PHP + Apache server/application design
  • ASP + IIS server/application design
  • 8+ years SQL Programming
  • 10+ years Win32 Programming
  • 12+ 'C/C++' Programming under UNIX and DOS
  • 4+ years c#
  • 10+ years HTML/DHTML/CSS/Javascript (no ajax)
  • Various shell scripting languages
    Other skills
  • Network design, infrastructure and deployment
  • Security Penetration Tester
Employment History:

  • 5/03 - Present -- Microsoft - Security Group Manager
    • SWI - React
      • Managing team in charge of handling all incoming security issues. Technical arm of MSRC.
      • Managing team in charge of develolp of mitigations and workarounds
      • Technical Lead of internal emergency response team
      • Lead of team tasked with developing cutting edge indicators and warnings network
      • Working closely with law enforcement on security forensics and investigations

  • 10/00 - 5/03 -- Microsoft - Security Test Lead
    • Securing Windows Initiative Attack Team
      • Penetration tester/Lead
      • Create processes to engage in proactive security penetration testing
      • Built process to handle reactive security issues
      • Help design first implementation of Secure Development Lifecycle

  • 9/97 - 10/00 -- Microsoft - Software Security Engineer
    • Test Lead for Security/Networking/P3P testing direction for Internet Explorer Duties include:
      • Designing Test plans for each area
      • Planning and driving testing during product cycle
      • Spec reviews and feature reviews of all areas
    • Security black/white box testing
    • Designing intranet applications
    • Wrote and developed test tools using Microsoft Visual Studio
    • Helped develop automation infrastructure

  • 10/96 - present -- Sindac Inc
    • Ran IIS/Apache servers to virtual host multiple domains
    • Designed, maintained and updated multiple web pages
    • Web design for clients including intranet web application design
    • Run and Maintain free web based mail and other services

  • 10/96 - 9/97-- Dynasty Online
    • Networking Administrator of local Lan
    • Network consultant for major corporations (Cisco router configurations)
      Clients included:
      • Fox Network
      • American General Financing
      • Multiple Local Banks
      • Multiple Utility Companies
    • Security Consultant
    • Designing, consolidating, and implementing internet connections with corporate clients
    • Web master for hundreds of sites
    • Managing NT and TCP/IP based networks
    • Firewall installintion, configuration and evaluations
    • DNS Management, Account administration (radius), FTP and WWW setups

  • 12/95 - 3/96 -- Leapfrog Technologies
    • Designing, maintaining and updating of HTML pages.
    • Webmaster of several sites.
    • Worked with many graphics design packages.

  • 10/94 - 10/95 -- UCF - Civil Engineering
    • Programmed detalied algorithms for traffic incident detection in C
    • Ported major programs from a Sparc platform onto a 80x86 platform
    • Wrote an elaborate Xwindows menuing system using TCL/TK scripting language
    • Installed, maintained and administrated UNIX machines (SunOS,Linux)

  • 05/95 - 08/95 -- UCF - Civil Engineering
    • Designed and Maintaining the Civli and Environmental Engineering home page.
    • Designed and created graphics via Photoshop for home pages.

    References Available Upon Request.

Copyright © Richie