Jerome Smith Email & Phone Number

Penetration tester(Blog posts and other output are listed under 'Publications' and 'Projects')* Specialising in web apps, web services, Salesforce* Identified the potential for developing an in-house Salesforce testing capability; this self-driven project was initially technical (creating a methodology and new templates for reporting Salesforce vulnerabilities) but also took on a business perspective with outputs such as a product 'datasheet' and internal sales training* Spoke… Show more Penetration tester(Blog posts and other output are listed under 'Publications' and 'Projects')* Specialising in web apps, web services, Salesforce* Identified the potential for developing an in-house Salesforce testing capability; this self-driven project was initially technical (creating a methodology and new templates for reporting Salesforce vulnerabilities) but also took on a business perspective with outputs such as a product 'datasheet' and internal sales training* Spoke at NCC Con 2022: "Salesforce - Something for Everyone"* Virtual Cyber Security STEM sessions for Bournside School, Cheltenham - May 2021* Spoke at NCC Con 2020: “JWTs - From Zero to Hero”* Spoke at Alarm Conference June 2018: "The Public Sector Cyber Challenge: War stories from the front-line"* Spoke at Cambridge2Cambridge (C2C) July 2017 hosted at Cambridge University "Real World Pentesting" and moderated a panel discussion on careers in cyber security* Spoke at CamSec April 2017: "Hash length extension attacks"* Spoke at Cambridge University Inter-ACE Cyber Security Challenge March 2017* Spoke at inaugural CamSec meeting Sept 2016: "Tricks to improve web app excel export attacks"* Spoke at BSides Manchester conference July 2016: "From CSV to CMD to qwerty"* Spoke at NCC Con Jan 2016: "From CSV to CMD to qwerty"* Spoke at BSides Manchester conference July 2014: "SSL checklist for pentesters"* Revised all SSL/TLS reporting output; actively participate in the management and evolution of company-wide reporting standards Show less

Infrastructure and web application security assessment* Promoted to Senior Consultant March 2013* Deputy Manager for Pentest Team August 2013Wrote articles on various IT security topics:* Thinking the Unthinkable: What if a Cyber Attack Succeeds (archived at https://web.archive.org/web/20140629033412/http://penetration-testing.7safe.com/thinking-the-unthinkable-what-if-a-cyber-attack-succeeds/)* LinkedIn Breach Commentary (archived at… Show more Infrastructure and web application security assessment* Promoted to Senior Consultant March 2013* Deputy Manager for Pentest Team August 2013Wrote articles on various IT security topics:* Thinking the Unthinkable: What if a Cyber Attack Succeeds (archived at https://web.archive.org/web/20140629033412/http://penetration-testing.7safe.com/thinking-the-unthinkable-what-if-a-cyber-attack-succeeds/)* LinkedIn Breach Commentary (archived at https://web.archive.org/web/20130602092729/http://penetration-testing.7safe.com/linkedin-breach-commentary/)* The Business of Crime: Cyber Attacks (archived at https://web.archive.org/web/20130208042131/http://thegatewayonline.com/articles/commercial-awareness/business-crime-cyber-attacks)Continued to teach and develop ethical hacking courses* Rewrote CWSA wireless course 2013* Rewrote Hacking Insight for Managers 2013 Show less

Developed and ran ethical hacking/security courses CSTA (network/system), CSTP (web applications), CWSA (wireless), CAST (CREST-aligned web application testing), HIM (for managers)* The Ethical Hacker Network's review of the fully revised CSTA ("Hands down...a far better course than the CEH") is archived at https://web.archive.org/web/20150905112421/https://www.ethicalhacker.net/columns/editor-in-chief/an-american-hacker-in-london-course-review-of-csta-by-7safe.* My CSTA video is at… Show more Developed and ran ethical hacking/security courses CSTA (network/system), CSTP (web applications), CWSA (wireless), CAST (CREST-aligned web application testing), HIM (for managers)* The Ethical Hacker Network's review of the fully revised CSTA ("Hands down...a far better course than the CEH") is archived at https://web.archive.org/web/20150905112421/https://www.ethicalhacker.net/columns/editor-in-chief/an-american-hacker-in-london-course-review-of-csta-by-7safe.* My CSTA video is at https://www.youtube.com/watch?v=-35rwwLIPUQ* An archived CSTP review is available at https://web.archive.org/web/20121219103900/http://sentinel24.com/blog/7-safe-certified-security-testing-professional-review/ Show less

In connection with 7Safe

Including 5 years at CPNI, the Centre for the Protection of National Infrastructure

Researched and wrote scripts for business and financial multimedia training. One product won the company its first IVCA (International Visual Communication Association) award in 1999.

Computing Science

MSc Distinction Studied part-time while at CPNI (MoD)

Natural Sciences

Activities and Societies: Footlights Dramatic Club