Mike Arpaia
Facebook
Security
My work in security has focused on host intrusion detection, operating system security, and the infrastructure needed to understand and respond to activity across large fleets of machines. At Facebook, I created and open-sourced osquery to improve visibility into macOS and Linux systems, worked with the team to deploy it across corporate and production infrastructure, and later led the Intrusion Detection Infrastructure team.
I later co-founded Kolide, where I was the lead architect and developer for almost all of our backend, infrastructure, and operating system software. I co-created the original open-source Fleet platform for managing osquery deployments and worked on Launcher, osquery deployment, and secure software updates. Earlier, at Etsy, I built and deployed a custom host intrusion detection system; that experience informed many of the design decisions in osquery.
Open-Source Security Software
Security Engineering
Kolide
Co-Founder & CTO · July 2016 – January 2019
I co-founded Kolide and worked as the lead architect and developer for almost all of our backend, infrastructure, and operating system software. I co-created the original open-source Fleet platform, worked on Launcher and secure osquery updates, and built and led a fully remote engineering team.
Engineering Manager · October 2015 – June 2016
Staff Software Engineer (E6) · February 2014 – October 2015
I created and open-sourced osquery to improve host intrusion detection and operating system visibility on macOS and Linux, and worked with the team to deploy it across corporate and production infrastructure. I later led the Intrusion Detection Infrastructure team, building realtime analytics systems to understand and respond to activity across Facebook’s infrastructure.
Etsy
Senior Software Engineer · July 2013 – February 2014
Software Engineer · October 2012 – July 2013
On Etsy’s Security team, I built, deployed, and managed a custom host intrusion detection system across corporate infrastructure and participated in red team exercises to test its effectiveness. I also worked on application and infrastructure security, became the security lead for data infrastructure, and used distributed analytics for security monitoring and investigation.
iSEC Partners
Security Engineer · August 2011 – October 2012
I worked as a penetration tester and security researcher, with a focus on infrastructure security, mobile operating system security, and mobile application security. My research included mobile device exploitation and PHP application security.
Gotham Digital Science
Security Engineer · January 2011 – August 2011
While studying Computer Science at Stevens Institute of Technology, I worked on infrastructure and application security assessments for large financial and technology companies.