Amir Ghayour

• Wrote the scripts that set up the whole development environment in minutes, down from eight days; the team relies on them when a machine breaks or is suspected compromised.
• Designed and built the printing and export system used across the product, run under virtual accounts on an isolated network with no internet access in or out; rebuilt the application’s entire layout to be responsive.
• Tested and brought in AI tools; mentored colleagues and directed another engineer; became the link between IT and development.

Bash, PowerShell, C++, C#, TypeScript, React, JavaScript

• Evaluated model outputs and wrote and refined the prompts used to test and train AI systems.

• Identified and stopped an active threat over RDP and mitigated other exposures; advised on a simpler setup to increase security and reduce cost; refurbished hundreds of computers.

• Taught 3 General Biology lab sections a semester, 250+ students in 14 sections: quizzes, experiments, grading.

• LUKS2-encrypted root; signed UKIs via stock shim and MOK, GRUB inert, kernel lockdown; SELinux enforcing with confined users; fail-closed default-drop nftables; randomized MACs and anonymized DHCP; microphones and cameras disabled at the audio server and at the device node.
• No @core group: 24 core and 13 optional modules; a verify script proves the package closure against live repositories before install, and verify-install re-checks the security properties the modules set.

• Unpacked an encrypted, dynamically loaded payload from an APK with JADX, decrypted it, and analyzed its ARM and x86 binaries in Ghidra to uncover what it did.

• Found and exploited vulnerabilities in the Collegiate Penetration Testing Competition and Hackazon exercises; took Dr. John Black’s Ethical Hacking course; trained on pwn.college, Arizona State University’s open course; solved 300+ challenges in system, binary and software exploitation, some in web.

• Reverse-engineered apps with Apktool, dex2jar and JD-GUI; changed their behavior at runtime with Frida; ran a man-in-the-middle setup with Android Device Monitor and Burp Suite; demonstrated on CTF apps.