*Conducted external and internal vulnerability assessments and analysis using tools such as Metasploit, Nessus and nmap as well as manual testing*Performed manual and automated web application penetration testing for large scale deployments using custom written scripts and Burp Suite framework*Network penetration testing for medium and large networks leading to full compromise of critical assets *Exfiltration of sensitive data bypassing security controls *Performed password analysis by using hash various cracking techniques including GPU brute force, wordlist generation, and mangling*Ran physical penetration attacks which have lead to compromise of devices such as ATM machines and access to sensitive areas within buildings (data centers, key personnel offices)*Executed penetration tests and research against medical devices including but not limited to MRI machines, infusion pumps, and CT scanners which have lead to zero day vulnerabilities which are unpublished due to NDA*Worked with clients to deliver exceptional reports and documentation of all security findings*Executed social engineering attacks including physical intrusion as well as phishing, malicious media and telephone attacks.*Reverse engineered Microsoft Windows applications looking for security vulnerabilities*Performing security assessments on iOS and Android applications *Ran PCI ASV quarterly scans for clients

Identified and exploited vulnerabilities within but not limited to: network services, web applications, wireless networks, and physical security controlsInvestigated new and evolving threatsDocumented highly technical information in comprehensible formWorked independently and met all deadlinesWork in partnership with clients to formulate action plans and deliver feedbackPassionately studied offensive security skills and techniques to improve skill setResearched ways users develop passwords

* Designed and Executed web application scanning service using Qualys Web Application Scanning platform* Responsible for vulnerability management using Qualys, Nexpose and Nessus* Demonstrated and verified vulnerabilities using the Metasploit Framework* Routinely executed web application penetration tests using Burp Suite, AppScan and manual testing techniques* Executed PCI scans as an Approved Scanning Vendor (ASV) certified auditor* Conducted penetration tests against internal security infrastructure including firewalls, IPS devices and management consoles.* Researched public exploits and engineered them to ensure execution in various environments * Uncovered software flaws using fuzzing techniques in popular document formats* Compiled data into custom reports for clients illustrating vulnerabilities in their infrastructure

* Designed and implemented automatic signature deployment for Cisco IDS with custom Perl scripts* Managed Dragon IDS and deployed sensors for very large environments* Examined and modified IDS/IPS signatures to lower false positive rates

* Worked with Fortune 500 clients on complex issues in very large networks* Analyzed IDS alerts to detect network compromise attempts* Escalated serious security incidents to clients and worked with them to gather intelligence* Verified accuracy of IDS alerts by doing manual packet inspection