Senior Security Consultant · Feb 2022 – Present
- Lead red team and purple team engagements for enterprise clients across healthcare, financial services, government, and critical infrastructure sectors
- Manage engagement teams and serve as project lead for complex multi-week penetration testing programs
- Conduct internal/external network penetration testing, web application and API security assessments, and firewall configuration reviews
- Perform physical interface security assessments across 20+ interface types — Ethernet, USB, HDMI, DVI, SDI, DisplayPort, DB9/CAN bus, RCA, and AUX — testing device-level attack surfaces including EDID injection, DDC/CI manipulation, HDCP downgrade, CEC command abuse, HID injection, and USB power analysis
- Conduct wireless protocol security assessments across Wi-Fi (WPA/WPA2/WPA3), Bluetooth/BLE, Zigbee, Z-Wave, Sub-GHz RF, UWB, LoRa, RFID/NFC, and SmartCard — device enumeration, protocol sniffing, replay attacks, relay attacks, and key extraction
- Perform manufacturer-authorized medical device penetration testing against FDA-class devices
- Conduct IoT and embedded device security assessments including firmware extraction, bus protocol analysis (SPI, I2C, UART, JTAG, CAN), and hardware reverse engineering
- Execute physical penetration testing and social engineering campaigns including phishing, vishing, and on-site intrusion
- Developed applications that automate common, repeatable, non-destructive penetration test processes and operations — 40+ custom Python/Go security tools operationalizing these disciplines into automated assessment workflows with universal findings schemas and cross-tool correlation
- Design and manage C2 infrastructure including VPN tunnels, reverse proxies, and DNS tunneling; deploy and operate remote pentest appliances as drop boxes in target infrastructure for persistent access during engagements
- Manage and operate a fleet of pentest hardware devices across SDR, Bluetooth, Zigbee, UWB, LoRa, RFID/NFC, bus analysis, and microcontroller categories
- Assembled several physical device and interface testing kits and provided mentorship and training for their use against medical devices in support of FDA-required testing
Security Consultant · Mar 2018 – Jan 2022
- Managed on-site and remote penetration testing engagements including network, wireless, web application, and social engineering assessments
- Conducted firewall configuration assessments and vulnerability assessments for enterprise networks
- Delivered ransomware preparedness assessments and produced actionable remediation reports
- Mentor junior consultants and manage the intern program, including outreach to educational institutions, project tracking, and professional development
Security Analyst · Jan 2016 – Feb 2018
- Developed security programs and control frameworks mapped to PCI DSS, HIPAA, and SOC 2 standards
- Built and delivered security awareness training curricula for client organizations
- Conducted penetration testing, wireless assessments, and risk registry mapping
Security Research Junior Analyst · Jul 2014 – Jan 2016
- Performed computer security research, incident analysis, and vulnerability scanning
- Assisted with PCI, HIPAA, and SOC 2 audit preparation and penetration testing engagements