Tim Northrop

Languages:

• Java, Python, C, C++, x86-64 Assembly, C#, TypeScript, JavaScript, SQL, HTML5, CSS3, Bash, Racket

Security Research & Assessment Skills:

• Cache-Poisoned Denial-of-Service (CPDoS), Memory Corruption/Code Injection, Threat Modeling, SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF)

Libraries, Frameworks, Protocols, and Tools:

• RESTful APIs, PyTorch, Docker, Kubernetes, GCC/G++, GDB, .NET, JUnit, Quarkus, jOOQ, Matplotlib, NumPy, Pandas, PostgreSQL, Git, OpenGL, TCP/IP, HTTP/HTTPS, Maven, Swagger, OData, MSTest

Systems, Operating Systems, and Software:

• Amazon Web Services, Microsoft Azure & DevOps, Google Cloud Platform, PCs (Assembly and Overclocking)
• Linux, Android, Windows, macOS, ChromeOS
• Burp Suite, WSL 2, SQL Server Management Studio, Android Studio, Microsoft Visual Studio & VS Code, Eclipse, IntelliJ, Vim, VMWare, Intel Quartus Prime, RARS, Unreal Engine 4, FL Studio, Adobe Premiere Pro

Software Engineer

WeFi Technology Group, LLC - Attleboro, MA - Co-op

June 2024 - December 2024

• Implemented updated internal REST API using ASP.NET Core for Izzi, a cloud-based supply chain finance platform used by IT vendors, resellers, and lenders that processes billions of dollars in transactions per year in 40+ countries.
• Wrote C# code generators to create models, configs, controllers, and dependency injection logic for 1,776 endpoints.
• Ensured appropriate code coverage and validated expected functionality with MSTest unit testing.
• Maintained proper source control and a strong Agile development process with CI/CD and Azure DevOps.

AV Collaboration Engineer

Wayfair, Inc. - Boston, MA - Co-op

July 2023 - December 2023

• Led development on Python command line program used to make calls to the Google Admin Directory API to deprovision ChromeOS devices from CSV input, allowing for reallocation of hundreds of unused licenses.
• Developed Python script that executes Bash commands to ping ChromeOS devices to determine connectivity, date of last use, and org unit, providing a clearer picture of the distribution of devices and their use cases.
• Applied optimizations over IP in real time to embedded audiovisual systems during presentation events featuring C-level executives presenting to 2,000+ attendee audiences of suppliers, employees, and investors.
• Managed intricate embedded system networks including thousands of meeting room devices through Google Admin and Logitech Sync in over 200 rooms locally and hundreds of others at offsite locations to enable and support intuitive and streamlined collaboration between teams.

Northeastern University - December 2025

BS in Computer Science with a Concentration in Systems

Coursework:

pub.dev/packages/hydro_loader - over 200 downloads total!

Primary (and currently only) developer and maintainer of the hydro_loader package.

Check out the blog post!

GitHub Repository | Official Package Documentation

• Designed and developed a cross-platform Flutter widget featuring custom animations and painters and an extensive set of tunable parameters like the number of waves, wave tint/magnitude/period offsets, border options, and more.
• Published package on pub.dev with comprehensive documentation covering the features and usage of the widget.

Cache-Poisoned Denial-of-Service Attack on Simulated Server

October 2025 - October 2025

• Investigated black-box web application to uncover vulnerabilities, probing to extract information about the CDN used and error handling. Identified discrepancy between implementations of the HTTP protocol in proxy servers.
• Exploited discrepancy in proxies' request body parsing methods by crafting an HTTP request payload using the Header Method Override (HMO) variation of the CPDoS attack by including a header that goes unnoticed by the proxy but provokes an error on the origin server. The proxy cached this error and served it to all legitimate users.

Neural Networks in Music Genre Classification

September 2024 - October 2024

GitHub Repository

• Designed a fully connected neural network (FCNN) that processes raw audio feature data extracted with the librosa Python package as well as a convolutional neural network (CNN) that takes mel spectrogram images as input.
• Implemented the two networks using PyTorch and assessed their performance to better understand which features or representations of musical input contribute most to its placement in a certain genre.

Simulated Border Gateway Protocol Router

September 2022 - October 2022

• Wrote Python code enabling acceptance of route update messages from neighboring routers using the Select and Sockets libraries to keep an up-to-date routing table and continue accurate packet delivery across the network.
• Generated route update announcements to send out to all neighbors while forwarding any received encrypted data packets to their intended destination, guaranteeing that all connected devices received expected updates and data.