Principal Low-Level Systems & Cybersecurity Engineer
A detailed overview of deep expertise across foundational areas of systems engineering and cybersecurity, honed over two decades of dedicated development and research.
Mastery over Windows kernel-level programming to create powerful, low-level security and system utility drivers.
Expertise in intercepting system and application behavior to enforce security policies and monitor operations.
While specializing in low-level development, possess extensive experience in building complete, end-to-end solutions using modern web and cloud technologies. This ensures that powerful backend agents have intuitive, scalable, and responsive user-facing interfaces.
A comprehensive timeline showcasing both professional product development at KDTS and diverse independent projects and explorations, highlighting a passion for technology and complex problem-solving.
Designed and developed a core endpoint monitoring product, enabling real-time recording of on-screen activities and implementing granular controls/alerts for file access, application usage, and removable media. (See: Product Page)
Created a virtual drive solution to provide secure, encrypted data storage.
Architected and developed a comprehensive suite including a centralized controller to coordinate security services, a custom GINA module for fingerprint logon, and APIs for user identification.
Designed a client-server application to track application usage activity and generate detailed usage and focused task reports.
Engineered a full-disk encryption solution utilizing a file filter driver for on-the-fly data encoding/decoding, effectively safeguarding data against theft.
Designed and developed a web-based Privileged Identity Management (PIM) system for automated Windows/Linux account creation/deletion and password updates based on user requests and schedules. (See: Product Page)
Created a client-server file integrity monitoring system with a web UI, utilizing SSH for remote CRC32 checks to detect and report unauthorized file changes.
Developed a Windows desktop application for live screen viewing of RDP sessions on the same server, enhancing monitoring capabilities.
Designed and implemented a standalone CUI tool for sensitive data (e.g., credit card number) discovery across various databases and file types, with hash-based change detection. Supports both Windows and Linux.
Engineered a highly secure custom USB drive-based authentication solution for Windows 10/11, intercepting Credential Providers to enable login, lock screens upon USB removal, and user logoff.
Developed a client-server real-time scanning and reporting system for distributed deployment of PAN's sensitive data discovery capabilities, centralizing scan configurations and results.
Projects and explorations that demonstrate a passion for technology and a talent for solving unique, complex problems beyond core responsibilities.
Successfully disassembled and reverse-engineered e-book reader applications to call hidden functions within the application's DLLs to unlock the DRM, demonstrating deep binary analysis skills.
Developed a specific solution to correct incorrect "Thai Character Mai Ek" positioning for certain fonts in PDF files, showcasing sharp attention to detail and advanced problem-solving in character rendering.
Gained experience in manipulating OpenOffice documents using XML syntax, highlighting proficiency in document structure and data transformation.
Developed a web-based video conference application utilizing Flex and Wowza Media Streaming Server, demonstrating expertise in streaming technologies and real-time communication solutions.
Extensive experience with microcontrollers like Arduino, ESP32, and PIC. Developed a "BTJoypad" to turn a Symbian phone into a wireless Bluetooth joypad, showcasing embedded systems expertise.
Possess experience with TOT Telephone Directory Server SDK (OSA API) and Telephony API for interfacing with Nortel telephony devices, highlighting strong integration skills with complex communication systems.