Amos – Flutter, Ruby on Rails, Python

Four interrelated projects implementing static and dynamic security vulnerability scanning for iOS and Android applications. The projects identified vulnerabilities in built applications using state of the art static and dynamic analysis methods, used by companies large and small in industries ranging from finance to media.

• Added scans for new vulnerabilities;
• Improved the projects' APIs allowing for finer-grained and quicker testing of individual vulnerabilities;
• Upgraded the codebase in the face of new iOS/Android versions;
• Debugged and resolved issues reported by clients;
• Wrote a UI for internal use accelerating common tasks saving significant time for each team member on a daily basis.

A static obfuscator for iOS applications that obfuscates compiled app binaries, scrambling their symbols.

• Designed and implemented a static obfuscation tool for iOS applications;
• Orchestrated large scale testing to ensure a high threshold of confidence in production;
• Interfaced with backend and frontend teams to drive integration of the tool into a larger pipeline.

A Passkey server for use with mobile applications. The server supported several internal applications to easily add passkey support. User authentication was stored in firebase.

• Designed and implemented the passkey server;
• Added passkey support to internal mobile applications;
• Was responsible for demonstrating passkey usage and advising clients about passkey implementations.

A timeline-based note-taking and file-storage app that aims to remember everything and everywhere. It is centered around chronological entries, allowing users to edit rich-text notes and timelines synced between all possible devices. It integrates file storage into the timelines and adds optional encryption at the paragraph level.

• Designed and implemented front-end, back-end, website, introduction video, and video tutorials, all from scratch;
• Built a cross-platform library in C that uses libgit2 to do high-level git operations (init/clone repo, push/pull/merge). Note that libgit2 is cross-platform but very low-level; Moment of glory:
• The business proposal was selected from among 400 applicants and received a funding package with resources towards bootstrapping this app.

This internal transfer server was a product that ran on cloud VMs (in AWS, Azure, and GCP) operated by IBM Aspera. It received incoming FASP connections - high-speed file transfers, often in the tens or hundreds of gigabytes in size and multi gigabyte per second, and was responsible for chunking the files and storing them in S3-compatible storage (as well as the opposite - assemble S3 chunks into files for downloads). This server supported both horizontal and vertical scaling, and required careful tuning and optimization to maintain high performance in high load situations. The server itself was written in Java, but was accompanied by a stress testing project written in Python.

• Added new features to the application;
• Monitored and improved server performance, including transfer speed and memory usage;
• Added support for new cloud providers;
• Fixed bugs reported by clients;
• Identified and resolved bottlenecks of the project;
• Resolve client issues escalated from the support team.

This project encompassed several mobile clients and one SDK that involved file transfers using IBM Aspera's FASP protocol. The SDK was published and allowed third parties to develop their own apps that could leverage Aspera high-speed transfers.

• Developed and maintained the iOS and Android SDKs;
• Worked closely with the core team that supported the C codebase to add new architectures as mobile devices like arm64;
• Keep the mobile code up to date with the rapidly changing core architecture;
• Added new features and fixed bugs according to client requests;
• Mentored several interns.

A collaborative file-sharing platform similar to email but focused on attachments: users can send packages to one another with huge files with the only limit by the server's storage space. The project was a classical Rails app with users, groups, and managers able to send packages and see the previous history of the application.

• Added several key new features;
• Oversaw the design and implementation of high-availability deployment features;
• Oversaw a visual redesign of the app, closely working with the design team;
• Identified performance issues;
• Fixed bugs in the lifetime moment on clients' systems due to the growth of client teams.