Damian Menscher

Damian P. Menscher

Mountain View, California; +1-650-796-4363; menscher@gmail.com
                     

Horizontal Line

Job Objective:

To identify and eliminate network-based vulnerabilities through the use of penetration testing, firewalls, and intrusion detection. Focus will be placed on disaster cleanup (on a badly hacked network), forensics (both during and after an attack), and honeypot design.

Computer Skills:

Operating Systems:
  • UNIX: 7+ years IRIX (5.3, 6.2, 6.5); 2+ years HP-UX (10.20); some AIX (4.3.3) and SunOS/Solaris
  • PC: 7+ years DOS (3.3 - 6.22); 7+ years Linux (Debian, Fedora, Red Hat); 10+ years Windows (3.1, 9x, NT, XP)
Languages:
  • C/C++, HTML, Perl, Python, Shell scripting (sh, csh)
  • Parallel programming using shared memory (OpenMP) or distributed memory (MPI)
  • Some Assembly, Basic, Fortran 77/90, JavaScript, Pascal, Postscript
Administration and Security Skills:
  • Apache, ClamAV, Cups, DHCPd, FTP, NIS, NFS, POP/IMAP, Sendmail, Spamassassin, SSH, TFTP
  • Crack/John the Ripper, Firewalls, Sniffers, TCP Wrappers, The Coroner's Toolkit, Tripwire, some SELinux
  • Current events: read BugTraq and newsgroups regularly; don't limit self to 9-5 hours
  • Understanding of cryptographic protocols and attacks
Certification Exams:
  • IRIX Advanced System Administration (required to become an SGI Certified IRIX System Analyst)
  • IRIX Network Administration I (required to become an SGI Certified IRIX Network Administrator)
  • Certified Expert Penetration Tester (IACRB certification)

Related Work Experience:

(all listed experience gained during graduate school at the University of Illinois)
Security Consultant, Campus Information Technologies and Educational Services, January 2004 - May 2004
  • Improved security infrastructure by developing policies and tools for performing security scans of multiple class B netblocks and reporting scan results to network administrators.
Systems Administrator, Imaging Technology Group, August 2002 - Present
  • Managing services and security for a heterogeneous cluster of machines.
  • Set up, tested, and moved all primary services to a new server.
  • Responsible for system design, email infrastructure (including spam and virus filtering), security, and advanced troubleshooting.
Security Consulant, Various, January 2000 - Present
  • Investigated possibly-compromised systems and identified the cause of the suspicious behavior.
  • Used TCT to recover deleted files and tcpdump to monitor/track the intruders' actions and trace back to their home connection.
  • Cooperated with network administrators, security officers, and the FBI.
  • Notified other sites that had been compromised and provided advice for their recovery.
Computer Consultant, Physics Department, December 1999 - Present
  • Planned and supervised the installation of a new SGI server. Reinstalled all client machines to be Y2k compliant and to interact with the server through secure protocols. Minimized downtime and prevented data loss during the upgrade.
  • Later transitioned the group to Linux, while again minimizing downtime and maintaining interoperability with the legacy SGI machines.
  • Transitioned another research group from HP-UX and IRIX servers to Linux.
Assistant Network Administrator, Physics Department, June 1998 - September 1999
  • Assisted the network administrator and 700+ users during and after a system upgrade.
  • Managed Physics network and all Unix machines.
  • Provided network support, performed hardware and software upgrades (including the central Unix server), assisted users, and supervised other assistants.
  • Carried pager/cell phone to be on call 24/7.

Education:

University of Illinois at Urbana-Champaign, Urbana, IL
Brigham Young University, Provo, UT
The Pingry School, Martinsville, NJ
  • Attended with one of two academic/need scholarships.
  • Graduated Cum Laude.
  • SAT 1440/1600; ACT 34/36.

Selected Publications:

Talks and Posters:

Selected Conferences:

Selected Honors and Professional Affiliations:

Other:

Printer-friendly versions: 1-page, 2-page, or 3-page .pdf files.