Microsoft

Senior Offensive Security Engineer

Bugbounties and contracts for security R&D.

Security Research/Bug bounties

NightVision

I was given an idea for a static analysis tool. The tool should generate an OpenAPI specification document from the source code of the back end without dynamic analysis.

I devised methods to implement the idea from scratch. Came up with ways to extract information from code and process it to generate the output. The code is written in Go.

Security Researcher

Electronic Arts (EA)

Hacking videogames sparks joy.

- Worked on most games and services released during my employment.
  - Some examples: Star Wars: Squadrons, FIFA, Battlefield 2042, C&C Remastered, Origin, and EA (Desktop) App.
  - Game clients, servers, mobile and web companion apps, some cloud infrastructure, and 3rd party integrations.
- Static Analysis: Created custom Semgrep rules and found vulnerabilities in code. Popular languages were C, C++, Java, Python, Go, and even Rust.
- Documentation: Everything I did and learned is internally documented.
- Automation: Wrote glue code and customized Nuclei, Burp, and Masscan to scan the internal network for specific issues.
- Coordinated Disclosure program: Handled incoming reports and performed triaging, variant hunting, and root cause analysis.
- What I didn’t do: Break DRM, bypass Anti-Cheat, or create cheats. These are handled by a different team.

Senior Security Engineer

Synopsys Inc

- Enterprise Blockchain platforms: These platforms leverage the technology but are NOT cryptocurrencies. We developed a tool to attack Hyperledger Fabric and presented it at DEF CON 26.
- Thick-clients (native and managed code).
- Reverse engineering custom protocols (usually binary). I have written a couple of custom fuzzers.
- Mobile applications: Mainly Android and iOS, some Windows Mobile, even Blackberry.
- Web applications: This is our bread and butter. Currently, I mostly do manual testing with Burp. But I used to run Appscan daily when I had just started in the industry.
- Tool development: Most of my tools used to be in Python, now everything is in Go.
- Cryptography: I have analyzed complex systems, white-box cryptography, and even some custom ciphers.

Senior Security Consultant

Cigital, Inc (A Part of Synopsys)

Started as an Associate Consultant in May 2013, worked my way up.

Cigital joined the Synopsys Software Integrity Group (SIG) in December 2016.

Johns Hopkins University

Course assistant for Theory of Computation graduate course.
- Holding regular office hours.
- Grading homeworks and assignments.

Course Assistant

Application security engineer and videogame cheater.

For more info please see:
- My website: https://parsiya.net
- My public knowledge base: https://parsiya.io
- Twitter: https://twitter.com/CryptoGangsta
- Mastodon: https://infosec.exchange/@parsiya

Taplio

Parsia 👾 Hakimian's Linkedin Analytics

Parsia 👾 Hakimian

Want to drive more opportunities from LinkedIn?