• Conducted web application penetration testing following the OWASP testing methodology, including assessments of APIs and middleware web applications, with a focus on identifying business logic vulnerabilities.• Performed both internal and external penetration tests, including privilege escalation attacks, and utilized C2 frameworks to maintain persistence in compromised environments.• Collaborated with clients to communicate the technical and business risks associated with each vulnerability, ensuring a comprehensive understanding of the impact on their organization.• Mentored junior penetration testers, guiding them in developing technical skills and understanding client needs.• Developed and presented detailed security test cases tailored to each application tested, delivering actionable insights to improve security posture.

• Performed application security testing on the company’s core applications, identifying vulnerabilities and collaborating with developers to remediate issues.• Conducted security assessments on Automated Teller Machines (ATMs), identifying both software and hardware vulnerabilities.• Developed custom malware using C++ to exploit vulnerabilities within ATMs for testing purposes.• Collaborated with business owners to identify risks within applications and create action plans to validate and address identified vulnerabilities.• Led a project to migrate the company’s legacy testing infrastructure to modern hardware, improving efficiency and testing capabilities.

• Conducted internal and external penetration tests for clients, simulating real-world attack scenarios.• Performed assumed breach network testing and executed privilege escalation on both Windows and Linux systems.• Developed and modified malware to successfully bypass anti-virus and endpoint detection and response (EDR) solutions.• Mentored interns, providing guidance throughout the penetration testing process to enhance their technical skills.• Triaged security vulnerabilities identified using the internally developed Attack Surface Management solution, ensuring timely and effective remediation.

• Collaborated with application developers to remediate identified security vulnerabilities.• Conducted penetration tests on Azure cloud environments, identifying potential risks and security flaws.• Identified application security vulnerabilities, including XSS, SQL injection, business logic bypasses, and IDOR, following the OWASP testing guide.• Developed scoping documentation for application security assessments to ensure thorough and accurate testing.• Managed the company's Responsible Disclosure Program (Bug Bounty), coordinating with external researchers and ensuring timely resolution of reported issues.

Managed Palo Alto firewalls.Rapid 7 NexposeConducted quarterly Penetration tests with Burp Suite nmap...etc Managed Mcafee AV for 2400+ endpointsIncident response using EncaseCreated Security alerts using splunk to correlate eventsProcess automation