IoT security at global scale
Azure Defender for IoT at Microsoft — including the CVE-matching Vulnerability Assessment feature.
At Microsoft (2020–2022) I was a senior software engineer in the Azure Defender for IoT group — building security analytics that protect IoT and OT devices at global scale, on top of Azure, for millions of devices across industrial networks.
Highlights
- Vulnerability Assessment — I designed and developed the feature that matches CVEs (Common Vulnerabilities and Exposures) to IoT devices using a matching algorithm over messy, heterogeneous device telemetry. Mapping vague device fingerprints to a precise vulnerability catalog is a fuzzy-matching problem at cloud scale.
- Detection pipelines — alerts and security recommendations derived from raw IoT data across many sources, with the precision/recall discipline that security products demand.
The group combined Microsoft’s cloud platform with deep security expertise from the CyberX acquisition — a crash course in shipping data-heavy detection features inside a global-scale product.