Senior Offensive Security Engineer

• Engineered and scaled a continuous automated penetration testing deployment across 4 tenancies, expanding network coverage to ~137K hosts.
• Defined scope, approvals, and guardrails for continuous testing operations via a comprehensive rules of engagement framework, enabling seamless integration of additional network segments and infrastructure into automated testing pipelines.
• Built automated scan-to-ticketing integrations that ingested findings directly into the internal SOC platform, and developed SOPs, CLI tooling, and LLM-integrated API connectors enabling the broader team to operate and extend the deployment independently.
• Integrated offensive operation findings into a breach and attack simulation platform via custom Python scripts spanning multiple infrastructure segments, providing actionable data for detection engineering.
• Built automated WAF posture validation tooling against load-balanced targets using categorized payload wordlists across common web vulnerability classes, tracking allow/block outcomes for baseline efficacy measurement.
• Nominated for two awards and recipient of one for solo-executing PCI DSS tests of over 200,000 hosts.
• Performed PCI penetration tests, AI security reviews, mobile device management evaluations, voice synthesis model assessments, web application security assessments and internal network penetration tests.

Senior Red Team Consultant

• Nominated for Mandiant’s 2024 Consulting Excellence Award for efforts helping to secure the 2024 United States Presidential Election.
• Won Mandiant’s 2024 Thought Leadership Award for drafting novel research on the integration of Red Teaming and Artificial Intelligence.
• Drafted and delivered Mandiant’s first Large Language Model penetration testing service line, primarily focusing on adversarial input and data leakage.
• Authored and published the Red Teaming Artificial Intelligence (AI) article in the 2024 M-TRENDS Report.
• Directly emulated advanced threat actor TTPs across multiple red team and penetration testing engagements against Windows, Linux, and Mac environments.
• Presented findings to client management and executive teams ranging from operational engineers to the executive suite of Fortune 50 companies.
• Conducted extensive web application and source code review including both dynamic and static application security testing across a variety of technology stacks.

Cybersecurity Analyst

• Conducted Breach and Attack Simulations (BAS) in custom lab environments to determine the effectiveness of Endpoint Detection and Response solutions.
• Established, managed, and ran a government bug bounty/vulnerability disclosure program through HackerOne.
• Launched customized Key Performance Indicators utilizing EPRI research, creating metrics for interpreting human risk factors in overall cybersecurity risk posture.
• Automated risk assessment and analysis of 3,880 mobile device users and applications.