Protecting businesses and their customers against modern threats. We work on solutions for authentication, access control, phishing protection, and secure payments. We also lend our expertise in consulting engagements. I'm involved in all aspects of the business.

Co-founder and CTO

Software Engineer and Product Security Expert for data center security technologies. Developed applications and tools to build a complete software stack that leverages Intel platform capabilities relevant to the next generation Cloud Data Centers, specifically Intel Trusted Execution Technology (TXT), Intel Software Guard Extensions (SGX), and Intel QuickAssist (QAT) for providing enhanced security and platform trust in the cloud. Advised software teams on product security.
Buzz words: Cloud Security, Certificate Authority, OpenStack, Trusted Computing Group (TCG), Java, .NET, C, MySQL, Oracle, Glassfish, Eclipse, NetBeans, Git, Subversion, Linux, PKCS11, Code Review, Security Protocols, Remote Attestation

Software engineer & product security expert

Packaged existing custom data processing server applications for subscription licensing in software-as-a-service (SaaS) model.
Integrated data processing applications with Salesforce.com API.
Reduced costs by automating key daily tasks using scripts and web applications.
Stabilized company's information systems to reduce downtime.
Created disaster recovery plan and supporting software tools.
Recommended and implemented security measures to protect IT systems.
Documented systems and technical operating procedures.
Developed web applications using HTML, CSS, JavaScript, SOAP/XML, AJAX, and JSON.
Created Java libraries of re-usable components to lower development and maintenance costs for server applications; used Eclipse IDE; some components were multi-threaded.
Configured MySQL replication cluster and wrote administration scripts.
Wrote project build scripts using Apache Ant; wrote custom tasks for Ant.
Wrote Ant task to automatically update Eclipse project classpath from project files.
Installed intrusion detection system on Linux servers.

Java Programmer

Designed and built an outdoor, wireless, alert, web-accessible water monitoring system using off-the-shelf parts, resulting in significant cost savings over other solutions.
Planned and supervised a client's IT infrastructure upgrade, saving thousands of dollars in maintenance costs.
Planned and supervised implementation of wireless Internet service which is now a major revenue source for the company.
Reviewed system security of a client's IT assets, resulting in migration of selected assets to a professional data center and upgrade of security protocols, which helped to win a contract.
Edited company marketing materials for accuracy; participated in successful sales presentations resulting in company's most highly valued customers.
Worked with clients to specify requirements for new projects.
Served as project lead for all development and maintenance projects involving HTML, PHP, CSS, JavaScript, Flash, C, Perl.
Served as advisor for Java-based projects.
Automated system and network monitoring to prevent downtime.
Installed and maintained Nagios network monitoring system; wrote custom plugins.
Contributed to and published Perl modules on CPAN.

Software engineer

Maintained e-commerce website and application servers using HTML, CSS,
JavaScript, Flash, C, Perl, and XML
Created the first web-based animated photo cards and supporting tools for artists
Planned and implemented distributed computing cluster to handle increasing traffic
and new features, drastically reducing downtime and related customer support
requests
Increased productivity of customer service representatives by developing tailored
web-based customer support tools
Configured ipchains firewall, Apache Httpd web server, and Mysql database server
to secure e-commerce website
Administered Linux and FreeBSD servers
Configured automatic monitoring of Linux and FreeBSD servers for usage of
memory, disk, network bandwidth, and CPU time using Nagios network monitor

Web Developer

CTO, full-stack developer, and problem solver in cyber security

Jonathan Buhacoff

World's first authentication system to feature one-tap login, strong multi-factor authentication, and phishing protection.

I am the architect and lead developer of the project.

LoginShield

A tool to build a customized version of the BouncyCastle Java library. This is useful for situations where you need to avoid a conflict with a pre-installed earlier version of BouncyCastle that doesn't have the features you need (e.g. Android apps).

MyBC

A tool for people who work with many repositories. One manifest to rule them all. Checkout specific tags, branches, or commits from multiple repositories into locations specified in a manifest file. Create and merge branches in a set of repositories with one command.

Manifest

Enable research centers and medical centers to collaborate on the cure for cancer without compromising proprietary algorithms or private patient data. I was an architect and lead developer for the security solution that utilized Intel's Trusted Execution Technology (TXT) to provide the security assurance to all parties that their code is running on a trusted platform, that the workflow is being executed as specified, and that the data is only made available to tasks on trusted platforms as specified in the workflow.

Collaborative Cancer Cloud

I was a lead developer on this project for a few years.

Open CIT is a remote attestation solution for data center Linux hosts and for virtual machines running on KVM, ESX, and Xen hypervisors. Open CIT provides visibility of the cloud infrastructure's security configuration and enables compliance enforcement in cloud data centers.  The solution leverages Intel processors with Intel® Trusted Execution Technology (Intel® TXT) to establish hardware root of trust and builds the chain of trust across hardware, OS, hypervisor and including asset tagging for location and boundary control.  The platform trust and asset tag attestation information is used by orchestrators (like OpenStack) and/or policy compliance management tools (like HyTrust) to ensure workloads are launched on trusted and location/boundary compliant platforms, and they provide the needed visibility and auditability of the cloud infrastructure in both public and private cloud environments.

OpenCIT has been renamed to Intel Security Libraries for Data Center (see project link). The original code is still at GitHub: https://github.com/opencit. 

Personal details

Jonathan B.

Summary

Technical skills

Work Experience

Personal Projects