1. Tom Pandolfo
15803 Bear Creek Pkwy, Apt. E520 631-605-1203
Redmond, WA 98052 tpandolfo@outlook.com
Skills
Programming: Proficiency with C#, Java, C++, Python. Experience with Ruby, Prolog, Lisp.
Web Development: Proficiency with HTML/XML, CSS, JavaScript. Experience with ASP .NET, Razor MVC.
Data/Analysis: Proficiency with SQL, MongoDB. Experience with MapReduce, MATLAB.
Software: Proficiency with LabVIEW, SolidWorks, MS Office. Comfortable on Windows and Linux operating systems.
Other: Robotics, mechanical design and prototyping, musical performance (vocal, piano, saxophone, trombone).
Experience
Microsoft Software Engineer Redmond, WA Aug 2013-Present
Static Analysis Tooling
For Security Assurance team, developed applications that scan compiled source code for specific insecure code patterns,
then generate bugs and feed them into existing channels. Code patterns found include potential DLL hijacking and
insecure use of untrusted user input.
Automation
Automated several process critical to Security Assurance infrastructure, including distributed compilation of OS source
code, static analysis, and internal bug filing. This helped streamline the team’s workflow.
Security Review
Helped triage and, in many cases, personally fix security bugs in OS code. Business impact includes ensuring strong
encryption/hashing, secure string manipulation, and minimally-permissive access control.
Web Development
Built internal security reporting site that interacts with project tracking databases; it uses a combination of JavaScript
and ASP.NET MVC to fetch data and visualize it in real time. This provided managers with a clear “State of the OS” in
terms of internal security metrics.
Microsoft Software Development Intern Redmond, WA Jun-Aug 2012
Variable Tracking with CFG’s
Using an existing Control Flow Graph (CFG) generator, designed and implemented a text-editor plugin that tracked data
passed into C++ function parameters, highlighting variables which contained all or part of the data. This allowed code
reviewers to follow user-tainted data in order to reveal security vulnerabilities.
Intuit Inc. Software Development Intern Mountain View, CA Jun-Aug 2011
Support Query Data Visualizations
Created web-based data visualizations of consumer search queries in order to derive insight from prevalence of certain
search tokens. Visualizations were built dynamically in real-time and included tree diagrams, node-link graphs, and
force-directed layouts.
Social Media Analyzer
Wrote application that tracks topics on Twitter and Facebook; it scans for key words and phrases, adds relevant posts to
a database, and performs sentiment analysis in order to obtain candid feedback from users of Intuit products.
Olin College Resident Resource (R2) Needham, MA Sep 2010-May 2011
Liaison between student body and Office of Student Life, organized campus events, was on-call with emergency phone
and keys, resolved student disputes, and provided information to students about health/counseling services.
Education
Franklin W. Olin College of Engineering Needham, MA May 2013
Bachelor of Science in Engineering with Robotics GPA: 3.1
Pertinent courses: Modeling and Simulation, Software Design, User Oriented Collaborative Design, Principles of
Engineering, Foundations of Computer Science Robotics I and II, Seven Languages in Seven Weeks, Systems.
Capstone project: Software Lead on a team of six people working for the Army Research Laboratory; designed and built
a cheap, portable Unmanned Ground Vehicle for the purposes of testing autonomous collaborative behavior.