Jacob S. Email & Phone Number

Chicago, Illinois, Us

Network and web application penetration testing.

Tempe, Arizona, Us

• Independently conduct and deliver network penetration tests (internal and external) andweb application assessments with and without source code.• Perform cloud penetration tests in AWS along with Kubernetes environments using EKS and GKE.• Served as technical lead during project setup and delivery, addressing questions and concerns at all stages of the reporting process. This included providing in-depth remediation guidance to technical audiences along with summarizing key risks for executive-level stakeholders.• Lead and mentored new consultants through job shadowing, providing feedback on active assessments, and guiding through the process of security consulting.• Performed and shared independent research related to current vulnerabilities found in the wild.• Performed technical reviews of consultant assessment reports, ensuring technical content was valid and met quality standards before client delivery.• Performed source code review of projects in Golang, Python, Java, C#, JavaScript.

Bloomington, Illinois, Us

• Perform source code review, external, internal, web application (white and blackbox), and thick application penetration test assessments in a Fortune 50 enterprise environment.• Lead assessments, coordinating with business partners to gather necessary access, assets, and understanding of the target environment.• Involved in internal team tool and script development, utilizing Bash, Python, and PowerShell. Recently developed a tool that has led to several critical findings on internal assessments.• Utilize security platforms and tools such as Kali Linux, Metasploit Framework, Burp Suite, Nikto, etc.

Bangalore, Karnataka, In

• Analyze, research, and recommend a course of action with security threats, vulnerabilities, and incidents discovered through QRadar.• Building out client security infrastructure to reduce the number of required analysts for their SOC and improving security workflow with the Demisto security automation platform, primarily in Python.• Presenting to clients with advice on security best practices, recommendations on company security policies, and instruction on how to best utilize new security integrations.