Christopher P. Email & Phone Number

United States

• Researched the Mythic command and control framework comparing against Cobalt Strike to evaluate tool adoption for a team of 16 people running approximately 80 assessments per year
• Supervised a weekly rotating team of 2 Red Team operators acting as a SME for execution of Red Team tactics and techniques targeting Healthcare, Financial, Retail and Hospitality industries
• Unified Purple Team methodologies used by the internal Red Team and SOC Consulting functions by analyzing workflows to streamline the execution and reporting process
• Mentored 4 new team members on roles and responsibilities, assisting with career development, and helping to ease the transition from CyberSOC to the Assessments Team
• Built out internal training and documentation for new Red Team members to minimize roadblocks and maximize efficiency
• Built out simple scripts in Bash and Python to automate remedial efforts during infrastructure deployment to organize payloads and increase efficiency during testing

• Automated payload development, test case execution, and infrastructure organization within Cobalt Strike using aggressor scripts with additional Bash and Python support scripts to improve efficiency of infrastructure.
• Developed guided training videos on infrastructure development, payload generation, and test case procedures for a team of 8 individuals working various shifts to learn execution techniques for the Purple Team.
• Created a Lambda function in AWS to generate random passwords for CloudFormation infrastructure used within Purple Team engagements

United States

• Setup local Active Directory lab infrastructure to simulate emerging threats in a client environment
• Ran offensive tools including BloodHound, Rubeus, and Mimikatz on client engagements to test various attack vectors
• Developed and maintained automation scripts using Python and Bash to improve efficiency on Purple Team engagements and decrease training time for new hires
• Analyzed Purple Team findings to identify client security weaknesses and recommend remediation strategies in a written report delivered to the clients at both the technical and executive level

• Monitored a Splunk and phishing queue for a Fortune 500 company creating clear and concise write-ups of each investigation
• Approved the creation of firewall blocks stemming from imminent threats identified in detections in order to prevent business critical assets from being affected
• Created a script in VBA and Batch to automatically create tickets for a client’s phishing inbox, replied to the user with the proper categorization, and initiated the account reset procedure decreasing onboarding time.
• Developed a Python script to automatically change the syntax of rules written in Fidelis Endpoint Protect to Tanium resulting in a streamlined rule development process