• Enabled clients to achieve compliance and secure their systems by conducting and reporting on the results of several types of security engagements.• Took part in daily meetings to share progress on projects and ensure all team members are properly supported.• Performed footprinting on hosts by using tools such as Nslookup, amass, and Whois.• Enumerated hosts for possible avenues of attack through port scans with Nmap.• Utilized basic python scripting to automate large quantities of Nmap scanning when necessary.• Created and utilized custom scan policies in Nessus to test hosts in the desired way.• Monitored Nessus scan performance and adjusted scan speed to minimize client downtime while still completing scans in a reasonable timeframe.• Analyzed findings returned from Nessus scans to assess validity and severity; ensuring what’s reported is relevant to the client.• Attempted to exploit certain findings identified by Nessus to show proof of concept of the vulnerability working.• Penetration tested web portals of commercial off the shelf devices by researching known vulnerabilities and attempting to manually exploit them with tools such as Burp Suite.• Gave recommendations on how to remediate findings found during both penetration tests and vulnerability assessments.• Evaluated network security controls present on client networks against CIS controls, NIST guidance, and general best practice; helping clients understand weaknesses present in their internal network.• Created requests for new firewall rules to be implemented, allowing communication into clients’ internal network for testing.• Monitored firewall rules that were in place to ensure only ones that needed to be active, were.• Delivered the results of security engagements to clients through a professional HTML report and synopsis.• Answered technical questions that clients have after being presented with the report; enabling them to make informed decisions on how to improve network security.

• Conducted phishing campaigns and trainings on client employees with Lucy; promoting security awareness through educational trainings for those who click.• Conducted vulnerability assessments for dozens of clients by utilizing Qualys; helping clients achieve compliance and secure systems.• Completed a vulnerability assessment for a premier client across 50 site locations using the Qualys scanner box.• Delivered Qualys vulnerability scan reports to clients in a timely manner so they can begin the remediation process as soon as possible.• Assisted in performing penetration testing by conducting Nmap, Qualys, and core impact scans; helping clients meet security regulation requirements.• Effectively communicated assessment processes and results with clients to help meet their goals.• Worked irregular hours as necessary to ensure timely completion of assigned projects.

• Supported client security awareness and training efforts to protect sensitive information and access by conducting targeted phishing and vishing assessments with KnowBe4.• Educated readers on the current attack trends and methodologies by writing several articles for the company cyber security blog.• Effectively communicated assessment processes and results with clients to help meet their goals.

Provided a Positive Customer Experience, Took and Made Customer Orders, Maintained a Clean and Sanitary Work Space, and Prepared Food.