Objective

Highly skilled and experienced penetration tester with multiple years of hands-on experience conducting vulnerability assessments, and penetration testing of web applications, networks, and systems. 14 years of experience as a Systems Administrator/Engineer, with a strong background in network design, security, and administration. Proficient in using tools such as Metasploit, Nessus, Nmap, Burp Suite, and more. Seeking a challenging role in an organization where I can utilize my technical expertise and experience to identify vulnerabilities and secure networks through ethical penetration testing.

• Experience in scripting languages including PowerShell, Python, and Bash.
• Excellent task management. Ability to handle multiple projects simultaneously.
• Hands-on experience with Cobalt Strike & Sliver C2 frameworks.
• Proficient in translating information from technical to executive/management terminology
• Currently within top 1% on TryHackMe. Placed 23rd on NahamCon 2022 CTF.

Certifications

• Offensive Security – OffSec Web Assessor (OSWA)
• TCM Security – Practical Mobile Pentest Associate (PMPA)
• Offensive Security – OffSec Experienced Penetration Tester (OSEP)
• INE – Web Application Penetration Tester (eWPT)
• TCM Security – Practical Web Pentest Associate (PWPA)
• TCM Security – Practical Network Penetration Tester (PNPT)
• Offensive Security – Offensive Security Wireless Professional (OSWP)
• Zeropoint Security – Certified Red Team Operator (CRTO)
• Offensive Security – Offensive Security Certified Professional (OSCP)
• INE – Certified Professional Penetration Tester (eCPPTv2)
• INE – Junior Penetration Tester (eJPT)
• Microsoft - Azure Fundamentals (AZ-900)
• Cisco Certified Network Associate – CyberOps (CCNA)
• Cisco Certified Network Associate – Route & Switch (CCNA)
• CompTIA – Network+
• CompTIA – A+

Experience

Redacted, redacted location        August 2023 to Present

Senior Penetration Testing Engineer, Security Testing         

• Developing exploits and custom proof of concept code for diverse targets.
• Performing security testing against a wide range of internal and external facing IoT, embedded systems, mobile, hardware, APIs, and web applications.
• Researching, learning, and continuously improving skills to emulate attacker TTPs.

Redacted, Remote US        May 2021 to August 2023

Penetration Tester        

• Performed a variety of penetration tests including network (external and internal), web application, wireless, and social engineering.
• Utilized the Cobalt Strike and Sliver C2 frameworks during engagements.
• Experience with tools such as the Metasploit Framework, Burp Suite Pro, Crackmapexec, Mimikatz, Rubeus, Bloodhound, etc.

Redacted, Remote US        July 2018 to August 2023

Systems Engineer (Server Security)        

• On the Infrastructure Team responsible for maintaining the physical and virtual servers running across data centers.
• Maintains and manages Windows and Linux servers, maximizing the performance and security of applications and information flow throughout the company.
• Supports all administrative aspects of Office365 and Azure tenant functionality.
• Monitors and responds to SIEM alerts from Rapid7 EDR, as well as performing incident response duties.
• Utilizes Tenable Nessus to perform vulnerability assessments, and Rapid7 InsightVM / Nexpose for monitoring the remediation of vulnerabilities.
• Conducts external and internal network assessments on hosts to validate appropriate patching.
• Developed key PowerShell and Bash automation scripts for various internal administrative tasks.
• Works with IT Leadership to assist in the creation of policies and procedures related to security.
• Works with various internal teams to fine-tune security settings during simulated adversary or deployment activities.

Redacted, redacted location        February 2011 to July 2018

Senior Systems Administrator        

• Managed Avaya IP Office phone systems at multiple sites.
• Managed Active Directory and Group Policy Object needs.
• Designed, implemented, and managed a Hyper-V Cluster in a multi site failover cluster configuration, with 40+ virtual machines.
• Designed and configured Microsoft Exchange 2010 to 2016 server migration/deployment and managed all aspects of exchange.
• Maintained Microsoft SQL and IIS servers for various internal applications.
• Designed, implemented, and managed SCDPM backup solution for all windows servers, with offsite backups located in Windows Azure.
• Designed, implemented, managed SCVMM cluster for managing virtual machines operating on premise and in Windows Azure.
• Responsible for network design, configuration, and deployment of WAN / LAN equipment.
• Managed SCCM deployment and integration of all workstation PCs, located at multiple clinics.

Redacted, redacted location        February 2011 to June 2015

Network Administrator        

• Maintained Active Directory environment.
• Designed, implemented, and configured Hyper-V Core servers running Server 2012 R2.
• Designed, implemented, and configured Windows SCCM and SCDPM for windows deployment services and backups for physical and virtual servers.
• Designed and configured Microsoft Exchange 2010 to 2016 server migration/deployment and managed all aspects of exchange.
• Implemented and configured Barracuda Spam and Web Filter deployment.
• Maintained Microsoft SQL and IIS servers for various internal applications.
• Created and managed master images for the entire MCHS school district.
• Implemented inventory-tracking system for management of school district assets.
• Responsible for network design, configuration, and deployment of WAN / LAN equipment.
• Installed Ubiquiti surveillance system at multiple campus locations.