Jacob S. Email & Phone Number

Chicago, Illinois, US

Network and web application penetration testing.

Tempe, Arizona, US

• Independently conduct and deliver network penetration tests (internal and external) andweb application assessments with and without source code.
• Perform cloud penetration tests in AWS along with Kubernetes environments using EKS and GKE.
• Served as technical lead during project setup and delivery, addressing questions and concerns at all stages of the reporting process. This included providing in-depth remediation guidance to technical audiences along.
• Lead and mentored new consultants through job shadowing, providing feedback on active assessments, and guiding through the process of security consulting.
• Performed and shared independent research related to current vulnerabilities found in the wild.
• Performed technical reviews of consultant assessment reports, ensuring technical content was valid and met quality standards before client delivery.

Bloomington, Illinois, US

• Perform source code review, external, internal, web application (white and blackbox), and thick application penetration test assessments in a Fortune 50 enterprise environment.
• Lead assessments, coordinating with business partners to gather necessary access, assets, and understanding of the target environment.
• Involved in internal team tool and script development, utilizing Bash, Python, and PowerShell. Recently developed a tool that has led to several critical findings on internal assessments.
• Utilize security platforms and tools such as Kali Linux, Metasploit Framework, Burp Suite, Nikto, etc.

Bangalore, Karnataka, IN

• Analyze, research, and recommend a course of action with security threats, vulnerabilities, and incidents discovered through QRadar.
• Building out client security infrastructure to reduce the number of required analysts for their SOC and improving security workflow with the Demisto security automation platform, primarily in Python.
• Presenting to clients with advice on security best practices, recommendations on company security policies, and instruction on how to best utilize new security integrations.