Eric Eames Email & Phone Number

Seattle, Wa, Us

Performing penetration testing for generative AI applications, web applications, and AWS. Helped to develop our team’s capability to perform AI red teaming. Creating a new product that automates web application penetration testing using large language models. Conducted and presented research on how to conduct model stealing attacks using autoML at internal and external security conferences.

Mclean, Virginia, Us

Started, developed, and led CrossCountry’s “Icebreaker” team of elite offensive security specialists. Built best-in-class red teaming (adversary simulation), web3 penetration testing, application penetration testing, physical security, and threat modeling services. Attracted and retained top-tier talent. Built “Icebreaker” brand, including Icebreaker website, advertising, whitepapers, blog posts, and social media that attracted new clients to CrossCountry. Ensured outstanding deliverable quality, both written and verbal. Created sophisticated security research and development capability, leading to the development of highly advanced attack tools, including unique payloads, C2, and infrastructure automation. Team revenue increased 50-60% every year.

Arlington, Virginia, Us

Technical lead for red team. Led all phases of red team engagements: sales, proposals, scoping, defining high-impact objectives, spear phishing, physical entry, lateral movement, privilege escalation, maintaining stealth, achieving the objective, quality control for written reports. Participated in red team engagements on a technical level when team members get stuck, guiding engagements to successful results. Presents assessment results to senior executives as well as technical experts, with a focus on the big-picture causes of security vulnerabilities and recommending strategies to improve the business's overall security posture.

Arlington, Virginia, Us

Simulating real-world, advanced cyber attack scenarios for Fortune 500 companies in financial, energy, health, and technical industries. Exploiting external and internal networks and applications while evading endpoint protection solutions and intrusion detection systems. Coding customized attack tools as needed, tailored to each attack scenario. Developing and executing spear phishing campaigns to successfully exploit internal corporate networks from the Internet. Successfully penetrating physical security measures with social engineering techniques to plant rogue devices on internal networks. Presenting results to senior executives and technical experts alike.

Reston, Va, Us

Lead penetration tester at SAIC. Led over 50 penetration tests for twelve different commercial and government customers. Performed all phases of a penetration test: scoping, proposal writing, meeting with the customer, conducting reconnaissance, host discovery, port scanning, service discovery, vulnerability scanning, vulnerability research, exploitation, maintaining access, pivoting to new targets, and reporting. Performed advanced exploits including blind SQL injection, command injection, bypassing authentication, SSL man-in-the-middle, ARP spoofing, directory traversal to recover passwords, password cracking, and session hijacking through cross-site scripting. Delivered written reports and oral presentations to customers, focusing on the impact of each finding to the customer. Direct supervisor of four penetration testers. Managerial responsibilities included performance reviews, interviewing and hiring new employees, scheduling and assigning tasks, training the new employees, and managing the penetration test lab.

Conducted hands-on penetration testing, generated vulnerability mitigations, and composed security reports. Acted as the customer's primary contact for virus defense. Traveled to various sites to investigate and repair serious virus incidents. Redesigned and taught virus response course to system administrators, and provided second-tier virus help.

Professional Certificate, Machine Learning And Artificial Intelligence

Bachelor'S Degree, Computer Engineering