Resume

Professional Experience

NetWorks Group [Sep. 2011 - Present]
Senior Consultant - Ann Arbor, MI
  • Ethical Hacking (web application security assessments, code audits, internal/external penetration testing, architecture reviews)
  • Development of Ruby software for backup management, change management, credential storage, and document management
  • Creation of customer RFP responses; technical review and guidance for Statements of Work; pre-sales engineering for solutions
  • Defined missing company processes, vetted applicable technologies, and guided successful implementation and usage

MNX Solutions [Oct. 2010 - Sep. 2011]
Senior Linux Systems Administrator - Monroe, MI
  • Cloud computing and information security specialist for customer accounts; proposal development and pre-sales engineering
  • Development of automation practices, configuration management, metrics, and deployment of custom code for clients
  • Management of various separately-maintained customer infrastructures totaling over 500 production servers
  • Leadership of junior employees including task assignment, overseeing project progress, and career development

ePrize, LLC [Nov. 2009 - Oct. 2010]
Linux Systems Administrator - Pleasant Ridge, MI
  • Subject Matter Expert (SME) for cloud computing; architect and lead administrator for deployment of Amazon EC2 infrastructure
  • Development of 22 Puppet modules for automation of configuration management service for cloud computing servers
  • Created & leads company information security meet-up and internal company mailing list for information security questions
  • Successful deployment of ad-hoc scalable infrastructure that withstood two Super Bowl advertised digital promotions at once

Orange Creative Solutions [May 2009 - Nov. 2009]
PHP Programmer/DBA/Systems Administrator - Keego Harbor, MI
  • Created Debian-based development infrastructure utilizing Subversion, Apache, Trac, MySQL & phpMyAdmin
  • Rebuilt the company's primary revenue website from static HTML to a fully dynamic 70 table, 55,000 record database-driven site
  • Developed company documents to structure project planning and deployment based around the SDLC

Aegis Data Security [Feb. 2008 - May 2009]
Web Developer/Linux Administrator - Dearborn, MI
  • Managed up to six company projects at a time, self-monitoring progress and goals
  • Developed a hardened Linux operating system for deployment on the product's server appliance
  • Created a complex object-oriented PHP server administration web site, integrating with the appliance's services

University of Michigan [Jul. 2007 - Aug. 2008]
UNIX Systems Administrator - Dearborn, MI
  • Replaced over 85% of systems infrastructure during a five month period, providing a smooth transition for users
  • Integrated OpenAFS, Kerberos, and LDAP in a mixed Solaris, Windows, and Mac environment
  • Created departmental policies and procedures, inline with University standards
  • Developed and implemented a server visualization and issue notification system using SNMP, Cacti, and Nagios

Eastern Michigan University [Dec. 2003 - Jul. 2007]
Senior Technician/Junior Network Administrator - Ypsilanti, MI
  • Created a FreeBSD-based file server for usage of staff/faculty complete with detailed technical documentation
  • Provided comprehensive end-user computer troubleshooting, network diagnostics, and internal web application development
  • Managed a staff of up to 12 student employees including scheduling, task-assignment, and general mentoring

Xzibition Data Communications [Feb. 2002 - Apr. 2003]
UNIX Systems Administrator - Telecommute (OH)
  • Deployed four servers running FreeBSD to service 500 customers and provided technical support via IRC, e-mail, and phone
  • Implemented Mandatory Access Controls, Port ACLs, event auditing, IPFW, process accounting to support information security
  • Custom BASH and PERL code to provide log aggregation and parsing for threat identification

Education

Eastern Michigan University
  • M.S. Technology Studies (Information Assurance) (4.00/4.00 GPA) [May 2009 - Dec. 2011]
  • B.S. Networking and IT Administration (3.24/4.00 GPA) [Aug. 2003 - Aug. 2007]

Certifications

  • (ISC)^2 Certified Information Systems Security Professional (CISSP) [03/01/2012]
  • Cloud Security Alliance 'Cloud Computing Security Knowledge' Certification [09/21/2010]
  • CompTIA Security+ [01/19/2006]
  • CompTIA Linux+ [05/07/2004]

Technical Skills

  • Server Software: Apache, Tomcat, Passenger, BIND, Courier, Dovecot, Postfix, QMail, Spam Assassin, SNMP, Nagios, Cacti, Munin, MySQL, PostgreSQL, OpenAFS, NFS, Samba, Kerberos, LDAP, Puppet, CFEngine, MCollective, IPTables, Foreman
  • Operating Systems: Windows Server 2003 & 2008, Mac OS X, Linux (Various), FreeBSD, Solaris 8-10, Junos, ScreenOS, IOS
  • Programming Languages: OOP PHP 5, Ruby, SQL, BASH, AutoIT, PERL, Javascript, CSS, XML, XHTML

Honors

  • University of Michigan  - Outstanding Service Award (2008)
  • Business Professionals of America - Cisco Systems CCNA Competition, 1st Place (2003)
  • Science and Engineering Fair of Metro Detroit - Computer Science, 1st Place Team (2002)
  • Intel International Science and Engineering Fair - IEEE Computer Society, 1st Place Team (2002)

Professional Organizations

  • Open Web Application Security Project (OWASP): Detroit Chapter [2012 - Present]
  • ISSA Motor City [2012 - Present]
  • Cloud Security Alliance (CSA): Southeast Michigan Chapter [2011 - Present]
  • MiSec: Michigan Security Meet-Up [2011 - Present]
  • ARBSEC: Ann Arbor Security Meet-Up [2010 - Present]
  • InfraGard [2009 - Present]

Volunteering

  • Make a Wish Foundation - Fundraiser Walker - 2012
  • Security B-Sides: Detroit - Registration Desk - 2012
  • Susan G. Komen, 3-Day Walk - Fundraising & Walker - 2010
  • Susan G. Komen, Detroit Race for the Cure - Runner - 2009
  • American Cancer Society, Relay for Life - Fundraising & Walker - 2008
  • Eastern Michigan University, Help Desk Fall Move-In - Field Technician - 2007, 2008, 2009
  • Leukemia & Lymphoma Society, Light the Night - Fundraising amp; Walker - 2006, 2007
  • Northern Ohio Technological Advancement Conference (NOTACON) - Core Organizer - 2003, 2004, 2005

Presentations

How I Became an iOS Developer for Fun and Debt
So You Want to Hire a Penetration Tester?: 10 Tips for Success
Keeping the Cloud Promise: Infrastructure Agility with a DevOps Toolchain
Core Linux Security: 0-Day Isn't Everything
"It's Just a Web Site": How Poor Web Programming is Ruining Information Security
Cloud Disaster Recovery: Leveraging Cloud Computing for Cheap Hot Sites
Cloud Computing: Let's Clear the Air
Development Operations: Take Back Your Infrastructure
Being a Puppet Master: Automating Amazon EC2 with Puppet & Friends
It's Vulnerable... Now What?: Three Tales of Woe and Remediation
What's a Linux?: Creating & Teaching College Courses at 24
Get Smart[y]: The Smarty Template Engine for PHP
Miscellaneous

Vulnerabilities

portable-phpMyAdmin WordPress Plugin
Authentication Bypass
CVE-2012-5469 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Hotel Booking Portal
SQL Injection
CVE-2012-1672 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

e-ticketing
SQL Injection
CVE-2012-1673 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

phpPaleo
Local File Inclusion
CVE-2012-1671 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

PHP Grade Book
Unauthenticated SQL Database Export
CVE-2012-1670 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

phpMoneyBooks
Local File Inclusion
CVE-2012-1669 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Andy's PHP Knowledgebase
SQL Injection Vulnerability
CVE-2011-1546 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Quick Polls
Local File Inclusion & Deletion Vulnerabilities
CVE-2011-1099 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Seo Panel
Cookie-Rendered Persistent XSS Vulnerability
CVE-2010-4331 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Pointter PHP Micro-Blogging Social Network
Unauthorized Privilege Escalation
CVE-2010-4333 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Pointter PHP Content Management System
Unauthorized Privilege Escalation
CVE-2010-4332 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Pulse CMS Basic
Local File Inclusion Vulnerability
CVE-2010-4330 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Orbis CMS
Arbitrary Script Execution Vulnerability
CVE-2010-4313 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Free Simple Software
SQL Injection Vulnerability
CVE-2010-4298 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

WSN Links
SQL Injection Vulnerability
CVE-2010-4006 | Full Disclosure | Bugtraq | Packetstorm | Exploit DB

Publications

Graduate Research

Technical Documentation

Blog Posts

NetWorks Group
MNX Solutions

Press Quotes

Interviews

Teaching

Eastern Michigan University

NITA 212: Open Source Platform and Network Administration - Fall 2009; Winter 2010
Labs: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11
Slides: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11

NITA 412: Linux Security Administration - Winter 2010; Fall 2010; 2x Winter 2011
Labs: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
 Slides: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9

ITT Technical Institute

IT 250: Linux Operating System - Fall 2009

Development

© 2013 Mark Stanislav