Security

Original member of security team of 3, helped to interview, establish team culture, and grow the team to 25 members. Implemented GCP OIDC authentication workflow for a critical internal application used by all Nuro internal vehicle operators. Performed internal physical security assessments on Nuro offices, and reported on weaknesses and recommended fixes. Established the initial Detection and Response team, assessed EDR, SOAR, and SIEM products, and integrated EDR and SIEM solutions at Nuro before handing off to newly formed Detection and Response team. Migrated 70+% of critical internal services to GCP Workload Identity. Removed 100% of GCP service account keys from the Nuro’s codebase. Developed a comprehensive secrets management solution using Google Secrets Manager and migrated 50+% of secrets in the codebase. Wrote policies/documentation for SOC-2 Gap Analysis, achieving 88% compliance in prep for SOC-2 Type 1 Compliance. Wrote internal security libs for other teams/users at Nuro: Slackbots, Google Groups APIs, Google Secrets Manager wrappers, Bigquery Client wrappers, automated Google Calendar privacy setting configurations, gRPC + OAuth library, Delegated GCP credentials

Security and Environments (SecEnv) Team. Recovered knowledge, rebuilt, and refactored the SSH infrastructure that allows employees to SSH into their dev environments. Improved documentation of security and SSH infrastructure, as well as the on-call process for SecEnv Team. Began research work and setup into AWS infra migration for security, cost, and speed improvements. Refactored and improved the creation and removal process of development environments for new and former employees. Wrote an SSH bastion for connecting to Kubernetes nodes in different regions. Performed security audits on code migrations, to verify that internal security guidelines were maintained

Tutor/TA for CS 11, 12, 15L, 30, 110 classes at UCSD (Object-Oriented Programming, Data Structures & Object-Oriented Design, Unix Lab, Computer Architecture & Systems Programming, Software Engineering). Assisted students in implementations of Object-Oriented Programming concepts (polymorphism, concurrency, inheritance, encapsulation, abstraction), various data structures (Trees, Hash Tables, Stacks, Linked Lists), using various software tools (Shell scripts, Git, Vim, gdb, Makefiles), computer architecture in C and SPARC Assembly, and software engineering principles and tools (design patterns). Analyzed and debugged students' code, and explained concepts in C, C++, Java, SPARC Assembly, ARM Assembly, and Unix.

SecEnv team within Infrastructure Team. Worked on upgrading the infrastructure to support the detection of CVE vulnerabilities in third-party libraries in Java, JavaScript, Python, C++, and apt Also wrote cron jobs to monitor insecure security groups of RDS databases.