Glenn B. Email and Phone Number

• Successfully conducted penetration testing engagements for various companies, organizations, and industries.• 4 years of Professional IT experience in Application Security, Penetration Testing and Vulnerability Assessment using OWASP (Open Web Application Security Project) Publications, NIST 800 Special Publications and SANS/CWE 25.• Hands-on experience in reviewing and defining requirements for information security solutions and mitigation techniques.• Involved in vulnerability assessment, Patch management and penetration testing using various tools like Nessus, NMAP, Metasploit, Aircrack-ng suite, Burp Suite, BeEF, Social Engineering Toolkit and other tools.• Skilled in performing both manual and automated security testing for web applications based on OWASP and CWE/SANS publications.• Working Knowledge in Windows and Linux (Kali Linux) operating system configuration, utilities and programming.• Experience in Security, Risk and Compliance Management and RISK Management methodologies.• Strong Experience in Security Health Check, Patch and Vulnerability management for Web applications.• Conducted both internal and external tests based on the client’s specifications.• Experienced in performing analysis of the results from penetration test to identify the risks that need to be taken care of immediately.• Well versed with performing source code review to find the flaws overlooked in the initial phases of development.• Generated and presented reports on Security Vulnerabilities to both internal and external customers.• Good team player with excellent analytical, inter-personal, communication and written skills, problem-solving and trouble-shooting capabilities. Highly motivated and can adapt to work in any new environment.

Providing Effective Cyber Defense through Offensive and Defensive Security Strategies.

Specializing in security: Account Security, Apple Pay, Apple Cash, and Apple Card

• Built out Vulnerability Scanning program for client.• Conducted an engineered both automated and manual scans for medium to large enterprises clients.• Educated clients through security and PCI DSS awareness.• Specializing in external and internal scans, vulnerability management, PCI DSS

ROWM is a Non-Profit Organization that provides Cyber Security training to inner-city youths.