Summary
Overview
Work History
Education
Skills
Timeline
AdministrativeAssistant

Morty Karim

Senior Security Engineer

Summary

Cybersecurity engineer with extensive experience in ethical hacking, penetration testing, and reverse engineering. Skilled in Apache PySpark and Cassandra data pipelines and crucial software deployment. Wireshark, IDA Pro, and Metasploit to strengthen network weaknesses and create robust solutions for military, communications, and other sectors. Leader in coaching teams and committed to ethics and quality, demonstrating knowledge of cutting-edge technology and a creative approach to cybersecurity concerns.

Overview

6
6
years of professional experience

Work History

Senior Security Engineer

Coaltion, Inc.
11.2021 - Current
  • Led a complex cybersecurity response team. Developed industry-standard response strategies, mentored new engineers, and increased communication.
  • Collaborated with development teams to integrate security into the DevOps pipeline, utilizing Jenkins and Docker.
  • Managed large-scale security initiatives, keeping clients informed and guaranteeing timely delivery.
  • Designed and implemented real-time threat detection systems using Elasticsearch for BinaryEdge.
  • Determined possible breach of company proprietary data to unauthorized resources and analyzed past performance data to enhance operations.
  • Managed several legacy code migrations. Successfully switched from C to Rust and Python to Go, improving performance and maintainability.
  • Introduced advanced network scanning methods to detect vulnerabilities, open ports, and exposed devices. Enables my team and I to do regular penetration testing to find Coalition, Inc. and its clients' weaknesses and threats faster.
  • Employed JIRA to improve project management and collaboration, simplifying my team's development process. To optimize operation, code review, one-on-ones, and morning standups were leveraged.
  • Promoted cybersecurity awareness and avoidance by teaching employees recommended practices at regular corporate meetings.

Lead Application Security Engineer

RHEA Group
01.2020 - 12.2021
  • Developed and implemented Tactical Edge Cyber Command and Control (TEC3), a specialized military program, for the Canadian Armed Forces using Golang and C, contributing to the enhancement of national security.
  • Created and implemented secure coding practices for applications.
  • Designed RTOS software for aerial, terrestrial, and satellite vehicles utilizing C/C++ and Rust for The European Space Agency .
  • Conducted threat modeling exercises to identify security vulnerabilities in the application architecture.
  • Oversaw a team of foreign development specialists, promoting collaboration and meeting project goals.
  • Researched emerging trends in the application security space to ensure the organization is up-to-date with best practices.
  • Trained team members in Wireshark, IDA Pro, Metasploit, and Nessus for vulnerability testing, penetration testing, and reverse engineering. I improved employee performance using personalized training, hands-on workshops, and mentorship.
  • Directed risk assessment operations and system test execution.
  • Educating staff on complicated malware and encryption techniques and using fuzz testing, code review, and static analysis ensured customer network and application security and demonstrated integrity, robustness, and trust.

Security Engineer

Field Effect Software
03.2019 - 02.2020
  • Investigated security breaches, evaluated risk factors, and developed remediation plans.
  • Implemented a data pipeline utilizing Apache PySpark for distributed processing and Apache Cassandra for NoSQL database management of over hundreds of thousands of data points.
  • Customer praised for large-scale network upgrade on budget and time.
  • Created and delivered cyber security courses for Field Effect's CyberRange product, educating clients on best practices.
  • Automated control of government equipment costing millions (e.g., network infrastructure, surveillance systems) using Python, Ansible, and Jenkins.
  • Programmed embedded systems using C++, contributing to critical technology development.
  • Completed network vulnerability evaluations using Wireshark for packet analysis, Nessus for vulnerability scanning, and Metasploit for penetration testing, strengthening the cybersecurity pipeline.

Automation System Engineer

Rogers Communications
06.2017 - 05.2019
  • Performed system upgrades, patching, security hardening and monitoring of systems.
  • Designed and implemented Python-powered automation scripts for virtual machines, boosting productivity and team focus on complex tasks.
  • Created scripts to automate day-to-day system administration activities.
  • Established robust IT backup and restoration management with security enhancements, monitored through quarterly reports and real-time systems.
  • Enforced advanced security measures for Windows Server & Hyper-V, reducing vulnerability risks.
  • Studied network security logs to identify and eliminate outside and internal threats.
  • Administered smart VMWare server architecture, utilizing resource allocation and load balancing, enhancing business activities.
  • Integrated Ansible for automation and PagerDuty for real-time alerting, simplifying deployment and reducing system downtime.

Education

Advanced Diploma - Computer Science And Engineering

Algonquin College
Ottawa, ON

Skills

  • Threat & Vulnerability Management
  • Team Leadership
  • Cybersecurity Training Development
  • Endpoint Detection and Response
  • Malware Analysis
  • Network Security
  • Vulnerability Management
  • Process Isolation
  • Risk Mitigation Strategies
  • Black Box Testing Tools
  • Regulatory Compliance and Documentation
  • Penetration Testing
  • Postgres
  • C/C
  • Go
  • Python
  • Rust
  • Bash
  • Typescript
  • Java

Timeline

Senior Security Engineer

Coaltion, Inc.
11.2021 - Current

Lead Application Security Engineer

RHEA Group
01.2020 - 12.2021

Security Engineer

Field Effect Software
03.2019 - 02.2020

Automation System Engineer

Rogers Communications
06.2017 - 05.2019

Advanced Diploma - Computer Science And Engineering

Algonquin College
Morty KarimSenior Security Engineer