Samuel Vidovich

Howdy, I'm Sam Vidovich, a programmer. If you want to chat, feel free to reach out. Here, I mostly keep blurbs about the different things I've used, and some pet projects.

Yugoslavian Culture and Learning Center

BCMS Language Flash Cards
Verb Conjugation Practice
Learn by Reading Books!
The Library
Narodna Nošnja: National Costumes
Yugoslavian Terms Glossary
Yugoslavian Phrase Book
The Ballads of Marko Kraljević
Reference Materials for Serbian, Croatian, Bosnian, etc.

June 2018 to September 2022: Senior Platform Engineer for Finite State

In the news
Huawei Supply Chain Assessment
Finite State Lands $30M Series B
Securing Connected and Embedded Devices in the Supply Chain

Accolades
Above & Beyond: Involvement in Huawei Supply Chain Security Assessment, Q2 2019

Works

Big Data
Constructed unprecedented statistical analysis pipeline for firmware vulnerability research

Reverse Engineering
Utilized Ghidra's scripting capabilities for automated binary analysis of arbitrary binaries

Test-Driven Development
Saved development endpoint cost by developing a custom Spark unit testing framework

Data Engineering
Modeled & constructed object storage based data lake; enabled APIs with queryable data

SCA
Designed and Implemented world-class Software Component Analysis pipeline for automated generation of Software Bill of Materials

Vulnerability Research
Performed and automated vulnerability assessment for linux based firmwares

Vulnerability Disclosures
Involved with research behind 2019 Philips IntelliVue WLAN vulnerability (ICSMA-19-255-01)

Dynamic Analysis
Emulated several IoT devices from firmware for use in dynamic vulnerability research

On-Premise Engineering
Ported cloud-based services to on-premise using kubernetes with novel methods for shipping data

Agile Leadership
Lead agile meeting processes, including sprint backlog groomings, sprint plannings, and team retrospectives

September 2022 to Present: Senior Software Engineer for Reach Security

In the news
Reach Security lands $20M Series A
Reach Mentioned in 2024 Gartner® Innovation Insight

Works

Configuration Introspection
Created first of its kind automated engine for determining how well customers are executing against Reach's custom-tailored recommendations

Compliance Mapping Automation
Developed novel technology for automatically mapping popular Security Compliance framework entries like Mitre D3FEND and SOC 2 CC to customer configurations

Dynamic Documentation
Added an automatic DOCX deployment guide feature to help stakeholders understand how Reach will impact their system, leading to much shorter time to launch for customers

License Utilization Analysis
Built a framework for mapping licenses to configurations which helps customers understand how well they are (or aren't!) utilizing the cybersecurity product licenses they're paying for

Ticketing Integration
Added integrations with Jira and ServiceNow to Reach's platform, streamlining customer workflows with automated ticketing and issue creation

Testing Czar
Created the foundations of unit and integration tests for complex parts of the Reach platform that are used by the entire engineering team

SAML Authentication
Implemented SAML authentication for the Reach platform, a standard, batteries-included feature for a security-first customer experience

Local-First
Built local harnesses for several production systems to allow development under heavy permissioning and security constraints, from the API to the data layer