Matthew Haigh
New York, New York, United States
Summary
🤩
Rockstar🎓
Top SchoolMatthew Haigh is a malware analyst and reverse engineer with 11 years of experience focused on dynamic network analysis and threat investigation at Mandiant/FireEye, where he progressed from Reverse Engineer to Reverse Engineering Manager. He combines deep technical reverse-engineering skills with hands-on security engineering—contributing to notable open-source tooling like FakeNet-NG by implementing SSL/TLS detection, protocol parsing, and hidden configuration features to improve malware network emulation. Matthew holds advanced computer science degrees from Columbia and pairs research-grade network systems knowledge with practical kernel and API work from earlier DARPA-related internships. Comfortable leading teams and shipping forensic-quality tooling, he also brings an unusual background in real-estate operations and sales that sharpened his project management, negotiation, and stakeholder-facing communication.
11 years of coding experience
8 years of employment as a software developer
Bachelor's Degree, Computer Science, Graduated, Bachelor's Degree, Computer Science, Graduated at Columbia University in the City of New YorkMaster’s Degree, Computer Science / Network Systems, Master’s Degree, Computer Science / Network Systems at Columbia EngineeringBorough of Manhattan Community College
Stackoverflow
138reputation
58kreached
6answers
1question
Github Skills (21)
ssl10
tls1210
python10
tls1310
malware10
traffic-analysis10
network-security10
anti-malware10
dpdk9
socket6
smtpd6
dns6
http6
linux6
ftp6
Programming languages (2)
Github contributions (5)
mandiant/flare-fakenet-ng
Jul 2017 - Jun 2020
FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Role in this project:
Back-end Developer & Security Engineer
Back-end Developer & Security EngineerContributions:136 commits, 18 PRs, 55 pushes in 2 years 11 months
Contributions summary:Matthew's commits primarily involve implementing and testing SSL detection mechanisms within the FakeNet-NG tool. This includes adding functions to detect SSL/TLS versions and content types within network traffic. They integrated the use of the `dpkt` library to parse SSL/TLS headers and implemented a proxy to filter traffic based on whether it is SSL or not. Additional commits incorporated modules for HTTP, FTP, SMTP, and DNS taste (protocol detection) functions and implemented a hidden configuration feature.
next-generationdynamic-networknetworksuspendednetwork-analysis
mlhaigh/flare-fakenet-ng
Aug 2017 - Apr 2018
Contributions:48 pushes, 5 branches in 8 months
dynamic-networknetworknext-generationnetwork-analysis
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.