Winny Thomas

DevOps Manager

Bengaluru, Karnataka, India23 yrs experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in malware analysis and intrusion detection.
Strong background in security architecture and product security.
Proficient in dynamic and static analysis tools.

Stackforce AI infers this person is a Cybersecurity Architect with expertise in malware analysis and security design.

Contact

Skills

Core Skills

Intrusion DetectionMalware AnalysisSecurity DesignProduct Security

Other Skills

ASAAssemblyCheckpointCiscoCisco TechnologiesCode ReviewsDNSFirewallsIPSLinuxLinux KernelNetwork SecurityRoutersRoutingSecure Testing

About

I have expertise in the following areas File formats: PE, PDF and MS Office file format analysis Static Analysis: Analysis of PE files inside IDA Pro and Hopper., idapython Dynamic Analysis: Windbg, Sys internals tools, DBI using Intel Pin and libVMI VMI: Virtual Machine Introspection for binary analysis and malware detection. Analysis of current sandbox solutions vis a vis current malware techniques Machine Learning: ML enthusiast studying ML algorithms for malicious document classification, lateral movement detection and VMI Programming: C, Python and x86/64bit assembly

Experience

Versa networks

2 roles

Principal Security Architect

May 2024 – Present · 1 yr 10 mos · Bengaluru, Karnataka, India · Remote

Principal Security Architect

Jul 2017 – May 2022 · 4 yrs 10 mos · Bangalore

Vehere

Principal Security Architect

May 2022 – Mar 2024 · 1 yr 10 mos · Bangalore

Fireeye, inc.

Staff Vulnerability Researcher

Jul 2015 – Jun 2017 · 1 yr 11 mos

Mcafee india center

Sr Technical Lead - Intrushield Testing McAfee

Oct 2010 – Jul 2015 · 4 yrs 9 mos

I work on advanced intrusion evasions and web based vulnerabilities for the purpose of testing the threat detection and response capabilities of McAfee Intrushield. I take care of coverage issues that may arise in recent threat detection. I research applications, protocols and encodings to understand how files can be extracted from them for the purpose of deeper inspection.

Citrix r&d india ltd

Senior Software Engineer - LifeCyle Maintenance (Security)

Jul 2009 – Jul 2010 · 1 yr

Design reviews, Code reviews with a strong focus on product security
Security design/development and secure test training for all the engineers in bangalore

Self employed

Independent Consultant

May 2008 – Jun 2009 · 1 yr 1 mo · Kerala

During this time I focused on preparing for the CCIE security track which I cleared in March 2009. Along with my preparation for CCIE I took up part time consultancy work; setting up Linux servers, securing networks, snort development (v2.4.5) and providing training in these areas

Ba systems

Senior Security Specialist

May 2007 – Apr 2008 · 11 mos

Incharge of IPS development for the routing platform developed at BA Systems and guiding the signature development and release process.

Nevis networks

Senior Security Researcher

Jan 2005 – May 2007 · 2 yrs 4 mos

I was involved in code audit for the NAC appliance nevis developed.
While with nevis labs I had to investigate recent vulnerabilities reported and come up with POC's
Reverse engineering MS patches to understand the vulnerability that was fixed and come up with POC
Signature development for vulnerabilities/malware assigned to me

Hcl technologies

Member Technical Staff

Jan 2004 – Jan 2004 · 0 mo

Ipsr solutions

Linux Consultant

Jul 2001 – Dec 2003 · 2 yrs 5 mos · Kottayam, Kerala

I was a linux instructor and consultant with IPSR and during my tenure I worked on the following
Linux server setup/consultancy for organizations associated with IPSR in Kerala
Deploying Apache, DNS, NFS, Sendmail and to a limited extend snort/ipchains