We provide IT Staff Augmentation Services!

Cybersecurity Medical Device Consultant Resume

5.00/5 (Submit Your Rating)

Lawrence, MA

SUMMARY

  • Provide embedded systems design consulting service for bootstrapping new products using up - to-date software and hardware; and troubleshooting and integration existing systems.
  • Provide consulting on integration of model based development process with certification process for high performance and safety critical real-time systems.

TECHNICAL SKILLS

Programming: C/C++11/ 14 /17, QT/QML, Boost, OpenCV, Assembly, XML, Java, Perl/Python, C#, MySQL, SQLite, DB4O, Cache, Lua

Hardware: PowerPC, ARM, Cortex-M0/3/4, PIC, OMAP 3&4, Tegra 3, Nvidia Jetson nano, Samsung Exynos 5, Atmel, Huawei Kirin 620, TI TMS320F28377, TI 28069, i.MX 6, i.MX 7/8.

Embedded Development Tool-chains: Eclipse, GNU GCC, DStream, Visual Studio, TI CCS, J-Link, ULINK pro, Buildroot, Yocto, Keil µVision, ARM DS-5 Studio

X11& RTOS: Android, Linux, QNX, LynxOS-178, UNIX, Solaris, ThreadX, TI RTOS/SYSBIOS, FreeRTOS, Amazon AWS IoT, Zephyr, VxWorks.

Modeling: UML, MATLAB/SIMULINK, Rhapsody, Enterprise Architect, MagicDraw, SAE AADL, MARTE, SysML, Model Based Development, MBD

Security: PKI, EMV, PCI DSS, RSA, AES CBC, AES ECB, Triple DES, SOAP, WS-Security, SAM, HSM, OP-TEE, GlobalPlatform API, Trustzone

Application development: GStreamer, OpenMAX, Poco, V4L2, CUDA, TensorRT, cuDNN, TensorFlow, Deep Learning

Project Management: Rational ClearCase, ClearQuest, RequisitePro, DOORS, CVS, Subversion, Git, CPI/SPI, Earned Value, Agile, Scrum

Control and Optimization: Model Predictive Control (MPC), Sliding Mode Control, Fuzzy/Neural Control, Adaptive Control, Optimal Control, Simulated Annealing, Markov Chain, Genetic Algorithm

Networking and Bus: AFDX, ARINC 429, CAN Bus, J1939, TCP/IP, UDP,RTSP, RTP, QoS, IPFilter, iproute2, uPNP, DLNA, GPS, UART, 802.11 a/b/g/n, Bluetooth, IxChariot, USB, DMA, PCI, PCIe, Qualcomm Gobi modems for 3G, 4G, LTE, Modbus, Wireshark, nmap, Metasploit

Smart Card: Mifare DESFire EV1, Classic, Ultralight, Mifare SAM AV2, ISO-14443, ISO-7816

Standards: DO-178B/C, DO-297, DO-253, DO-229D, TSO-C153, AC-20-145, ARINC 429, 664, 653, 661, ARP4761, ARP4754, TSO-C146b, TSO-C115b, 8110.49, ISO 13485, IEC 62304, NIST 800-53, ISO 27001, FIPS 140-2, STRIDE, CVSS, UL2900

PROFESSIONAL EXPERIENCE

Confidential

Cybersecurity Medical Device Consultant

Responsibilities:

  • Developed STRIDE threat models for several Acute Renal Therapy, Hemodialysis and Peritoneal Dialysis devices.
  • Developed software architecture to secure network connectable medical devices to meet UL2900 standards. Performed system and software security scan and analysis with Coverity, Black Duck, and Defensics, Burp Suite, Metasploit, Core Impact. Analyze all the security findings and developed mitigation methods. Developed certification package for 501k FDA and UL approval.
  • Developed TI Wilink8 WiFi Driver for Android 8 on IMX6 chipset to upgrade from Android 7 and replace Qualcomm Atheros QCA6134 wifi chipset. Optimized system runtime Power Management with suspend and resume for WiFi device.
  • Developed uboot for IMX6SL chipset and modified Linux kernel on MMC. Developed I2C driver for touchscreen on IMX6 and I2C driver battery charger chip and PMIC chip.

Confidential

Consultant

Responsibilities:

  • Developed a face recognition and comparison system on Nvidia Jetson Nano platform.
  • Investigated Principal Component Analysis (PCA), Back Propagation Neural Networks (BPNN), Genetic Algorithm, and LDA, SVM, Independent Component Analysis for feature extraction.
  • Developed and implemented a hybrid algorithm with PCA for feature extraction and BPNN for image classification and recognition.
  • Investigated 3D reconstruction from 2D face images and trained with stereo camera captures.
  • Developed device drivers and EMV L1 and L2 kernels on FreeRTOS with NXP Kinetis K81 chipset, STM32F4 chipset.
  • Integrated with Amazon AWS IoT core to securely store transaction log and device management.
  • Develop EMV L1 and L2 kernels on Zephyr RTOS on Broadcom BCM5820X chipset to provide a secure solution for MPOS.
  • Develop camera drivers, image post processing and QR code decoders for QR code recognition.
  • Developed SPI, GPIO, UART, I2C drivers for Broadcom BCM5820x and ESP32 chipset. D evelop ed secure communication protocols between MPOS solution to Android devices.

Confidential, Lawrence MA

Consultant

Responsibilities:

  • Bootstrapped the photovoltaics (PV) project with intelligent and secure PV inverter with mesh-networked WIFI control and communication module.
  • The inverter is using TI TMS320F28377D Dual-Core Delfino Microcontroller. Developed the bootloader for embedded controller to allow secure firmware update and fully automatic error recovery.
  • Developed the customized Linux kernel, U-Boot, SPI, I2C, USB drivers and WIFI mesh network driver for the control and communication module with the dual core NXP i.MX6 chipset. Developed C++14, Qt embedded application for SunSpec Dashborad on embedded Linux.
  • Developed WIFI Mesh-Networking on SX-PCEAC2 module from Silex Technology.
  • Developed the communication between PV embedded controller and Linux module on SPI and USB protocol to capture high speed data from embedded controller on control variables.
  • Developed Processor-In-Loop (PIL) models and simulations for PV embedded controller to validate control algorithm and collect artifact for UL1998 and UL1741.
  • Performed penetration test for the whole PV and control module on Kali Linux using nmap for port scanning, Metasploit for security vulnerabilities, and John the Ripper for password auditing.
  • Developed OP-TEE os for i.MX6 and developed client using GlobalPlatform API to for manage security keys for dynamic key distribution and secure PV firmware update with encryption.

Confidential, Aliso Viejo, CA

Consultant

Responsibilities:

  • Defined and implemented Model Based Development process and integrated with FDA certification process for ultra-violet light treatment system on the light adjustable intraocular lens.
  • Trained the engineering organization on the MBD and FDA certification process.
  • Developed the prototype of real-time wavefront optimized UV guidance system to automatic track the eye movement and analyze the wavefront to calculate the optimized UV treatment pattern.
  • Developed eye movement tracking algorithm based on extended Kalman Filter (EKF). Real-time embedded code is automatically generated using customized Matlab/Simulink Embedded Code Generation directly from the model.
  • The software environment is FreeRTOS and later moved to SAFERTOS with C.

Confidential

Consultant

Responsibilities:

  • Designed and developed next generation fare collection system and mobile payment system using barcode and Mifare Desfire EV1 NFC technology on embedded Linux to fully compliant with PCI DSS and EMV standard. Developed embedded application using QT/QML/BOOST/POCO on embedded Linux.
  • Designed the interface between barcode scanner module, NFC module, display, network, 4G WWAN, GPS and WIFI module. The hardware platform is Atmel SAM9260.
  • Developed algorithms to calibrate the camera setting for image feature detection and extraction using Matlab Computer Vision System Toolbox and developed HIL camera calibration system.
  • Profiled different settings for different ambient light conditions and ticket media to improve the performance and accuracy of barcode scanning.
  • Developed V4L2 driver for OmniVision camera.
  • Developed image enhancement and segmentation algorithm using Matlab and OpenCV to remove background noise, automatically segment and crop the image.
  • Ported the algorithm to highly efficient real-time code.
  • Designed and developed Desfire EV1 card data structure mapping to store efare and epurse products. Designed security scheme using SAM to secure the financial data and detect fraud.
  • Brought up the embedded system with customized Linux kernel and root file systems for mobile payment systems using Yocto to meet the requirement of EMV security standards on ATMEL chipset.
  • Developed drivers for 4G Sierra modem on Verizon network, LCD display, camera, NFC scanner, GPS and audio.
  • Developed extended Kalman filter for GPS dead reckoning algorithm for position and speed estimation for buses.

Confidential

Lead Engineer

Responsibilities:

  • Windows CE and Android Architect:
  • Develop software for 1D/2D barcode and NFC scanning systems on Windows CE and Android systems using BOOST library; defined the interfaces between drivers, OS kernel, libraries and application layers and among various applications; analyzed systems performance, throughput and dependencies among different functional components. Reviewed design specifications and designs.
  • Developed very fast barcode scanning algorithm under different ambient light conditions using Matlab/Simulink image processing and computer vision toolbox.
  • Developed Android VNC server on Tegra 3 by customizing GStreamer plugin rfbsrc to streaming video to windows CE device, optimized via Nvidia fbcon and OpenGL.
  • Continuous Integration System Development Process
  • Led Agile projects on test driven development (TDD) tool chain design and development, automatic test infrastructure for windows CE family and Android systems using QT cross-platform framework and Google Testing and Mocking framework.
  • Defined the CI process on version control, requirement and test case development for Test Driven Development (TDD). Developed and integrated the tool chain for test automation and management including static code analysis, Google C++ Mocking Framework (googlemock), Google C++ Testing Framework (googletest), Git, Gerrit, Jenkins.

Confidential

Senior Systems Engineer

Responsibilities:

  • IMA System Architecture Development
  • Designed Software Product Line (SPL) infrastructure across IMA systems by integrating Rhapsody UML, DOORS, and Model Based Design (MBD) to facilitate the project development processes from requirement, architecture design to verification, validation, and certification. Using SysML modeled interface and internal block diagram for Fly-by-Wire AFCS subsystem. Drafted plans of phased transition to SPL/MBD by introducing controlled variation points into models along with risks management for each domain.
  • Built system architectures for several IMA type aircraft programs including aircraft from ARJ 21 to Pro Line Fusion using UML/SysML/MARTE and integrated safety analysis and performance analysis, so the architectural model can be checked Fault Tree Analysis (FTA) and other safety criteria; the latency data can be obtained in different levels with tight bounds.
  • Developed IMA scheduling algorithm and designed mechanism to calculate ARINC 653 inter-partition schedule to meet both RMA criteria and optimize context switch between VMs using QT framework. Developed several papers on IMA partitioning analysis, latency analysis and scheduling. I also published several documents on robustness analysis on partitioned RTOS.
  • Matlab/Simulink MBD Development
  • Developed automatic flight control system using Matlab/Simulink/RTW-EC and MBD methodology.
  • Designed HIL testing system for flight controller via AFDX network and control actuator loads.

Confidential, Columbus, IN

Embedded System and Control Engineer

Responsibilities:

  • Model Based Development Framework
  • Architected MBD embedded development process integrating Matlab/Simulink, DOORS, Rhapsody, ADI Beacon Automatic Code Generator, and Simulink Embedded Coder. The process offered smooth transition from classical development approach to MBD process featuring continuous integration and verification.
  • Developed Automatic Testing and Calibration (ATC) Framework to provide an open infrastructure and complete set of tool-chain for MBD as a Six Sigma Green Belt project. ATC is highly customizable hardware in loop (HIL) testing platform. ATC sseamlessly integrate different types of hardware and software platforms and bug tracking systems using Matlab, C/C++, QT, BOOST, Java, Perl and other script languages.
  • Developed SIMULINK toolbox for CAN 2.0B, J1939 communication via PEAK-System Technik GmbH USB hardware.

We'd love your feedback!