About this site

Previous work

Projects

   

   

   

   

   

   

   

   

   

   

Ciex, Inc

Ciex, Inc is an independent consultancy working in Application Software Security, with past work in Software Development, and SaaS product consulting.

Jan 2018 -- May 2021

For various clients

Application Security Assessments
Conducted Application Security Assessments for various startup firms and established firms
Security Awareness Training
After analyzing an client's needs, I build tailored security awareness training materials. These are often in the form of self-assessment exercises.

March 2012 -- March 2015

source code audit
Conducted source code audit of two large pension funds' web-facing portals. These code bases contain more than 750,000 lines.
Compliance assessment
Conducted compliance assessment of a state pension fund's operational practice.

January 2007 -- March 2020

Electronic trading application
Created high-throughput low-latency proprietary e-commerce solution. Combined multiple logic servers running Ubuntu and a COTS multiple-node compute cluster. All components are written entirely in SBCL Lisp.

January 2007 -- July 2007

Asset Liability Management, Allstate Financial
Automated processes within Asset Liability Management division of Allstate Financial. Generated reports using C# and appropriate connectivity with Excel as a reporting tool.

April 1994 -- December 2002

Allstate Insurance Company; Northbrook, IL, Investment Departmentb

Industrial Training
Developed curriculum and taught classes in C++ programming. Trained additional developers and support staff, including proactive, positive customer support habits. Managed this team. Facilitated adaption of Lotus Notes culture.
Financial Data Feeds
Implemented a framework in C++ for converting data from vendor-specific pricing feeds in various formats such as Sybase, flat files, to Allstate-designed form for the Library Server system hosted in Oracle. on a Sun
This was written up in a chapter of the bookImplementing Application Frameworksas Chapter 25 (See Frameworks
This was called the Library Server, as it served as a resource for the Data Warehouse and other processes.
Financial Modeling
Rewrote the Option Adjusted Spread Municipal Bond Pricing system in C++, converting it from Pascal.
Municipal Bond Audit Report Tracking System
Rewrote Municipal Bond Research system using Lotus Notes
Portfolio Reporting System
Implemented a Portfolio Management Information system taking inputs from various Data Warehouses sources.
Tracking ``Non-Business'' use of Allstate Internet
Implemented an Internet Proxy Log Analysis process to monitor good and bad Internet Usage Practice using C++ and Oracle.
Trading feed
Implemented TCP/IP feeds to Bloomberg trade input feeds for the Library Server Project.
Financial Data Feed SME
Acted as key team resource and Subject Matter Expert for replacement of Library Server with Message Broker technology from TIBCO.

December 1994 -- May 1995

CCH, Riverwoods IL
Built a prototype of a new editorial workflow control and librarian system for a Legal Loose-leaf publishing system using Lotus Notes API on the client workstation, C and C++ on a Unix Server, and DDE connectivity.

April 1994 -- August 1994

CTMG/Active Systems; Ottawa, Ontario
Built and executed a test suite for SGML Client-Server Text Database using Microsoft Test, Windows NT, SCO Unix and TCP/IP.
Instituted release control and source control processes.

October 1993 -- April 1994

List Processing Corporation; Lisle, IL
Created complete clean-room documentation for existing core technology in AS400 COBOL in a 350 page specification. Built a prototype of USPS addressing logic in Smalltalk.

March 1993 -- August 1993

Bloom Associates; Reading, PA/Fischer Imaging; Denver, CO (consultant)
Built Smalltalk prototype for user interface for new Electrophysiology System. which provided ability to review past sections of trace, to measure duration and amplitude, and to add physician notations.

December 1992 to August 1993

Consultant
Rebuilt mainframe Document Production process using Desktop Publishing environment on Windows 3.1 with C and C++ and Borland OWL.
Ported OS/2 Easel application to Easel-Win.