Marc Bevand                              Phone: +1.310.254.8705
401 Avenue G, Apt 22                     E-mail: bevand_m@epita.fr
Redondo Beach, CA 90277-5916             Web: http://www.zorinaq.com
USA

Status
------
Date of birth: 1980/11/05.
Nationality: French.
Family situation: Single.
Miscellaneous: California and European driver licenses, military service
accomplished.

Objective
---------
A full-time position involving expertise in these fields: free and open source
software, computer and network security, reverse engineering, security
vulnerability research and exploitation, high-performance computing, assembly
optimization (mainly AMD64 and x86), low-level programming, Linux and BSD
kernels internals, operating systems design...

Experience
----------
· Jul 2009 - Present [El Segundo, CA, USA]:
Principal Architect, Security at Rapid7, LLC.

· Jul 2007 - Jul 2009 [El Segundo, CA, USA]:
Senior Software Engineer at Rapid7, LLC.

· Sep 2005 - Jul 2007 [Torrance, CA, USA]:
Software Engineer at Rapid7, LLC (developer of NeXpose, a vulnerability
assessment tool sold primarily to large corporations and government
agencies). Research and exploitation of security vulnerabilities, reverse
engineering of Microsoft security patches and proprietary network protocols.

· Dec 2004 - Sep 2005 [Los Angeles, CA, USA]:
System & IT Security Engineer at SmartJog USA Inc. (service provider offering
a platform for secure digital delivery of media content for the movie
industry). Design and implementation of RBC (reliable and secure file transfer
protocol), PKI deployment (multiple CAs, 500+ certs), system and network
administration.

· Sep 2003 - Dec 2004 [Paris, France]:
System & IT Security Engineer at SmartJog S.A. (see above for a
description of SmartJog). Linux development to secure the SmartJog platform.

· Mar 2003 - Sep 2003 [Issy-les-Moulineaux, France]:
6-month internship at SNAISO (value added integrator). Conception of
software modules to secure one of their IDS product (authentication,
encryption, access permissions, etc).

· 2002 [Le Kremlin Bicêtre, France]:
Teacher Assistant during 4 months at Épita. Instructed students in
C language development on Unix systems.

· 2001 [Paris, France]:
3-month internship at MiniSAT (interactive TV software developer).
Designed a back-office tool to manage one of their software.

· 1999 [Issy-les-Moulineaux, France]:
1-month internship at WStore (on-line computer hardware reseller). Audit of
their web site.

Education
---------
· Master's Degree, Information Technology; EPITA (École Pour l'Informatique
et les Techniques Avancées), SRS Department (Systèmes, Réseaux et Sécurité:
System, Network and Security), Paris, France (1998--2003).

Skills
------
· Development on platforms: GNU/Linux, OpenBSD, FreeBSD, NetBSD,
Sun Solaris, Digital Unix (OSF/1), Windows, DOS.

· Languages: C, C++, Perl, Python, AMD64/EM64T assembly, x86 assembly, Bourne
shell scripting, Pascal. Smattering: Sparc assembly, Java, SQL, OCaml.

· Assembly optimization: author of the world's fastest RC4 symmetric
cipher implementation for AMD64 (+50% speedup compared to the then-current
OpenSSL version), author of OpenSSL's MD5 message-digest optimized for AMD64
(+65% speedup).

· Kernel programming: addition of a syscall to FreeBSD allowing
(a)synchronous process execution, integration of an "active" link type into
the OpenBSD FFS filesystem, development of a new filesystem for NetBSD.

· Network programming: OS fingerprinting tool, ARP spoofing and TCP hijacking,
miscellaneous clients and servers (FTP, NNTP, IRC, etc).

· System programming: implementation of a shell, creation of an assembler
and its associated virtual machine.

· Unix system administration: IP networking, firewalling, NAT, DNS, DHCP,
TFTP, NFS, HTTP, FTP, SSH, Samba, LFS (Linux From Scratch) systems,
excellent ability to troubleshoot and debug various problems.

Miscellaneous
-------------
Languages: French, English. I have a passion for free and open source
software, astrophysic, digital electronic and Chess.

(Updated: January 24, 2007)