Brad H. Email & Phone Number

Currently lead a team of penetration testers. Engagements include everything from full scope blackbox (with or without social engineering) to applications (web, mobile, and desktop), IoT devices, code reviews, PCI Compliance, and FedRAMP testing.- Nmap, Masscan, Nessus- Amass, Gobuster, Aquatone- Golang, Node, Bash. Python- Evilginx2, Gophish- Terraform, AWS, Azure, Docker- Voodoo, BloodHound

I perform security assessments of web based applications/services. This includes:- Enumerating services- Finding and exploiting vulnerabilities (OWASP Top 10, SANS Top 25)- Patching vulnerabilities- Static code analysis- Manual code review- Threat modeling- Creating a report with details of all discovered issues and suggested remediation action items

🌐💻

My responsibilities include:- Finding, exploiting, and patching vulnerabilities in software and systems.- Setup/Maintain Splunk cluster- Building/Maintaining Security related features.- Planning/executing red team exercises.- Creating online training courses to help co workers be more security minded.- Triage and impact assessment of externally discovered issues.- Coordinate incident response across affected teams.Languages/Frameworks Used:- PHP- JS- Ruby- GoTechnology and Tools Used- Burp- Splunk- Hackerone- Puppet

My responsibilities include:- Finding and exploiting vulnerabilities in software and systems.- Assisting teams in fixing discovered vulnerabilities.- Educating teams on how to avoid common mistakes made by us and defined by OWASP.- Educating QA (really anyone interested) to help find security related issues before they get released.- Planning/executing red team exercises.- Writing code to patch security vulnerabilities in various languages.- Running security themed "book club".- Creating online training courses to help co workers be more security minded.- Triage and impact assessment of externally discovered issues.- Coordinate incident response across affected teams.Languages/Frameworks Used:- Ruby/Rails- Node/ExpressTechnology and Tools Used- Burp- SumoLogic- AWS- Acunetix- InsightVM- BugCrowd

My responsibilities include:- Writing new micro-services for use in CanvasLMS- Maintaining existing apps.Languages/Frameworks Used:- Ruby/Rails- Node/ExpressTechnology and Tools Used- AWS- Dynamo

Responsible for maintaining and developing new features for the AtTask core product. Participate in estimating stories for iterations. Issue management.Used Javascript, CSS, Java, git, scrum, kanbanOn AtTask Agile, I implemented the front end using backbone, handlebars, LESS, and nodeunit. The finished product was on time, on scope, and fully tested in javascript.

Responsible for creating and maintaining web applications and components for a number of web based products. Rapid prototyping for potential clients. Bug triage and fixes.Creating DML/DDL for new features.Used PHP, Oracle, xhtml, html5, CSS, AJAX, prototype.js, Silverlight.

Responsible for creating prototypes, design, implementation and maintenance of web based applications.Lead a team of 5 developersUsed PHP, MySQL, AJAX, xhtml, CSS