Gordon MacKay

Senior Software Consultant

Gordon MacKay is a software and systems expert and technical executive with more than 20 years of experience in computer, telecommunications, network security, and SaaS/Cloud platforms. Gordon has led development and QA teams in architecting, developing and deploying a multi-tenant SaaS-based vulnerability management platform and scanning solution which is being used worldwide by Fortune 500 organizations as part of their ongoing cyber defense programs.

He is also an expert in developing integrations between various cyber security platforms including Endpoint Protection Platforms, EDR/XDR, SIEM, Network Access Control, Ticketing, SOAR, SAST/DAST platforms, Vulnerability Management and more.

Gordon currently serves as a consultant in Quandary Peak’s Due Diligence team in supporting technology investments, mergers & acquisitions, as well as software related litigations. He is skilled in security analysis, software architecture, and code review and assessment including web application security code reviews.

Summary of Qualifications

Has 18 years of experience in software development practice as a software engineer in architecting, designing and deploying multi-tenant SaaS-based cyber security solutions.
Served as Chief Technology Officer at Digital Defense, Inc. and led R&D and QA teams in architecting, designing, implementing, and deploying its in-house multi-tenant vulnerability management platform which is used by Fortune 500 companies worldwide as part of their ongoing cyber defense programs.
Has many years of experience in integrating SaaS and Cloud based platforms, with other platforms including premised-based offerings, using various web integration technologies and APIs including REST, SOAP and more. Solutions integrated included Microsoft for Endpoint, Splunk SIEM, Palo Alto Cortex XDR, ServiceNow Security Operations, Veracode, and many more.
Delivered various invited speeches and technology demonstrations at numerous cyber security events and conferences including RSA security, ISC2 Security Congress, ISSA International Conference, many USA BSides Conferences, while highlighting across media and security articles including, Forbes, Fox Business News, CIO review, SoftPedia, IT World Canada, and others.
Has 10 years of telecom software development experience with various large telecom organizations including Nortel/Bell Northern Research, DSC and Alcatel, designing platform related switching software as well as call processing features using ISDN, SS7 and many other telecommunication protocols.
Holds three patents related to vulnerability scanning and vulnerability management – one of which is a method for correlating point-in-time detected and assessed assets, to their correct counterparts as detected in different point-in-time assessments.
Holds a Bachelor of Electrical Engineering/Computer Engineering from McGill University Montreal Canada.

Areas of Expertise

Private Equity technical due diligence for investments and acquisitions as well as patent litigation.
Computer / Network Security
Vulnerability Management and scanning, SIEM, SOAR, Endpoint security, Web Application security, penetration testing, Email security.
Programming/Software Development
C / C++, Java, Python, PERL, Assembly, PHP, HTML, CSS, XML, JSON, Django, Git, CVS, Mercurial, Visual Studio, Eclipse, Agile process, Jira.
Databases
RDBMS, SQL, Oracle, MySQL, Postgres, SQLite.
Operating Systems / Frameworks
Linux, Unix, Mac OS, Windows, iOS, Android.
Networking & Protocols
TCP/IP, HTTP/HTTPS, REST, SOAP, SMTP, DNS, FTP, UDP. ISDN, SS7.

Litigation Experience

K+S Potash Canada General Partnership v.
Veolia Water Technologies Inc. et al. | Mar 2023–Present
Jurisdiction: Court Of Queen’s Bench For Saskatchewan
Case #: QB No. 817 (filed 2018)
Nature of Suit: Breach of Contract
Counsel: Stikeman Elliott LLP
Technology: Plant Design Management Systems (PDMS), Clash Detection, Database synchronization
Role: Software Technical and Functional Review Lead
A.H., by her Legal Guardian Patanne Coffey
and Z.H., a minor, by her Parent and Legal Guardian Anna Hauser v. Madison Metropolitan School District et al | Nov 2022–Present
Case Number: 22-cv-134
Filed in: Western District of Wisconsin
Multimodal Media LLC. v. Guangdong OPPO Mobile Telecommunications Corp., LTD. | Aug 2022–Present
Case Number: 2:21-cv-00436-JRG-RSP
Filed in: Eastern District of Texas
RoboticVisiontech, Inc. v. ABB Inc. | Aug 2022 – Present
Case Number: 1:22-cv-01257
Filed in: Delaware District Court
The Nielsen Company (US), LLC. v. TVision Insights, Inc. | June 2022-Present
Case Number: 1:22-cv-00057-UNA
Filed in: District of Delaware
Provisur Technologies, Inc. v. Weber, Inc. | Jan 2022–Present
Case Number: 5:21-cv-06113
Filed in: Western District of Missouri
Flypsi, Inc. v. Dialpad, Inc. | Jan 2022–Present
Case Number: 6:21-cv-00642
Filed in: Western District of Texas
Roche Diabetes Care, Inc. v. Insulet Corp. | Jan 2022–Present
Case Number: 1:20-cv-00825
Filed in: District of Delaware
Wirtgen America, Inc. v. Caterpillar Inc. | Dec 2021–Present
Case Number: 1:17-cv-00770
Filed in: District of Delaware
IPCom GmbH v. AT&T Mobility LLC., et al | July 2021–May 2022
Case Number: 2:20-cv-00322
Filed in: Eastern District of Texas

Download Gordon’s CV

Location

Gordon is working in our Austin office.

Practice Areas

LitigationLitigationConsulting Expert

Health ITFocus AreaCloud & App Security

Due DiligenceArea of ExpertiseCybersecurity Analysis

Languages

English, French

Download Gordon’s CV

Gordon holds three patents related to vulnerability scanning and vulnerability management – one of which is a method for correlating point-in-time detected and assessed assets, to their correct counterparts as detected in different point-in-time assessments. Gordon has presented on this topic in the form of a “murder mystery” themed presentation at various conferences, including at Harvard University.