⦿ Implemented Multi Factor Authentication (MFA) for Navan platform end-to-end:

• backend integration with Auth0 and Twilio;

• controls in user profile on the frontend to configure MFA;

• user-facing documentation, setting up processes for customer support.

Audit of cryptographic implementations, research and development of authentication, authorization, and encryption solutions.

⦿ Audited cryptographic library implementing symmetric encryption. Identified 1 major vulnerability (memory mismanagement that allows client code to override block cipher mode of operation).

⦿ Reviewed security of transport protocol used by an IoT vendor.

⦿ Research and develop authorization and encryption for a protocol for decentralized exchange and transformation of data.

⦿ Implemented graph-based access authorization framework which models access as a social graph.

⦿ Identified and fixed vulnerability with activation token reuse granting an attacker full access to customer account bypassing authentication.

⦿ Implemented part of FIDO U2F specification and signature verification for JavaCard platform to enable using issued bank cards as U2F.

Enterprise Security Group

⦿ Developed framework for bare-metal servers auto-discovery and provisioning (deploying 1000 servers under 20~minutes).

⦿ Designed and implemented infrastructure asset management system for hybrid cloud environment to enable compliance monitoring.

⦿ Crypto Review Board: review and audit cryptographic solutions and implementations in company products.

OpenStack cloud solutions.

⦿ Developed framework for bare-metal servers auto-discovery and provisioning (deploying 1000 servers under 20~minutes).

⦿ Implemented authentication middleware for Python-based micro-services.