Evan Isaac Email & Phone Number

Denver, Colorado, US

Pittsburgh, PA, US

Pittsburgh, PA, US

• Led web application penetration testing engagements
• Reviewed web application penetration testing reports
• Conducted thorough manual vulnerability assessments, identifying weaknesses and providing actionable recommendations.
• Contributed to cybersecurity content creation on the Echelon Intelligence page
• Hosted the Hackin’ SaaS webinar, providing insights into the Top 10 Echelon Web Application vulnerabilities

Pittsburgh, PA, US

• Conduct web application and network (internal/external) penetration tests for clients to identifyvulnerabilities
• Utilized Plextrac to document findings of a penetration test
• Updated content on the internal information wiki regarding network penetration testing and pivoting

Bristol, RI, US

• Conducted a Public Port Risk Assessment to identify active Ethernet ports on campus
• Carried out a Network Risk Assessment using Nessus Professional and nmap on all identified open ports and machines
• Wrote a report detailing the vulnerabilities and open ports identified during the assessment
• Used Nessus Professional and Nmap to identify machines and vulnerabilities on the network.

Bristol, RI, US

• Worked with the Penetration Testing class.
• Presented tips and tricks to pivoting and Metasploit
• Assisted students with penetration testing activities such as using nmap, dirbuster, Burp, Metasploit, MSFvenom

Bristol, RI, US

Assisted students with classwork related to the Cybersecurity and Network major, including (but not limited to): Penetration Testing, Networking, Digital Forensics, Programming, Powershell, and Active Directory.

Woonsocket, RI, US

• Worked on a penetration test with a CVS penetration tester
• Updated content pertaining to OWASP Top 10, OWASP Top 10 API, and SANS Top CWE
• Reviewed and updated the penetration testing educational resources
• Presented PCI DSS 4.0 and Penetration Testing Workflow to members of Software Security Group

Johnston, Rhode Island, US

• Conducted various experiments to further cybersecurity research
• Worked with Crowdstrike to investigate the kill chain of different malware
• Analyzed network traffic within Splunk to better understand threat hunting
• Mapped different Active Directory attack vectors to the MITRE ATT&CK framework and to better understand potential security risks faced by the organization
• Learned CIS hardening techniques for Active Directory to prevent security risks

Bridgehampton, NY, US

• Worked with the Information Security Team to secure the network from external attackers
• Used Microsoft Outlook to find IP addresses of phishing scammers and tracked their location
• Presented training on technical attack techniques to the Executive Board in a digestible and understandable manner to improve executive understanding of cybersecurity threats