As Principal for the Online Technical Services team, Michael's efforts are entirely focused on the advancement and continuous improvement of Online's penetration testing and security management services. Being the resident technical expert for the penetration testing team, Michael serves as both leader and mentor for penetration testing services, develops training material, defines and implements new penetration testing methodologies for the Online Technical Services practice, and seeks new opportunities for Online to contribute novel and advanced research in information security for both its clients and globally.Michael contributes actively to open source security research, participates in training and security conferences and events, and develops tools for the team to use actively on engagements in order to continuously advance Online's penetration testing services and capabilities.

My role at Online is to perform various information security assessments to drive and assist security and compliance initiatives for its many client partners. As a Senior Penetration Tester and Security Consultant, I perform highly complex, technical security engagements that are intended to test and improve security controls for organizations across multiple industries. These include "Red Teaming", Penetration Testing, Application Testing, and many others. I also frequently act as an expert advisor in the IT fields of both network and information security for both Online and its client partners.I specialize in attack-based testing of networks, systems, and applications in an effort to identify, exploit, and report security vulnerabilities before they can be abused by malicious threat actors and Active Persistent Threats (APTs). I also am a frequent contributor to the open source community, creating attack-oriented security tools to be used my ethical hackers and penetration testers during their engagements. Some of my independent research and contributions (not endorsed by Online) have been featured in security talks at the BSides Cleveland Security Conference.

I am the primary technical expert and information security professional acting on behalf of Nemesis Security for both its internal security management as well as its resident professional consultant for all client-facing information security services.My role is to leverage my professional experience to develop and engage security and risk management strategies both internally within Nemesis and offer the same approaches to our clients. My daily tasks include crafting information security strategies, risk management solutions, developing paths to compliance for multiple information security standards including PCI DSS, ISO 27001 & ISO 27002, HIPAA, FISMA, and integrating NIST Cybersecurity Framework Guidelines where necessary to augment more complex security programs.I have also designed and architected cloud, network, and on-site hardware solutions with defense-in-depth focused strategies, including the creation for Security Operations Centers, ensuring compliance with SOC2 standards, new hire management, vendor management, vetting executive and technical leadership candidates, and identifying opportunities for cross-functional team management between service managers.My experience as an offensive security certified professional (OSCP) supplements my expertise in network architecture and management to expedite pathways to compliance and higher security standards for data protection policies, a deep understanding of threat intelligence and incident response procedures and policies, proper security policies and procedures for identity and access management, data loss prevention, and data backup and security procedures.I have also amassed countless industry connections in the information security space as a professional consultant, as well as a respected and recognized speaker at various security conferences on numerous information security topics. These connections afford me a deep pool of industry resources to augment any organization I work with.

I provided security advisory services and acted as the chief information officer for a small HVAC business that sold commercial and industrial heat and cooling solutions as well as automated climate control systems. Part of my role was in managing the security of the company's customer and financial records, managing security policy and procedures surrounding the implementation of automated climate control systems, and providing additional advisory and installation services for business networking, information networking, IT systems management for the business. This included projects such as: - Implementing data backup solutions - Designing, architecting, and installing the company network - Managing information system security policies and work hardware security - Manage data loss prevention policies - Manage internet and email security policies

I performed Information Security research which includes a variety of skills and services primarily in the scope of penetration testing. Some of my daily work consisted of performing penetration testing, network threat assessments, physical security tests, vulnerability assessments, exploit research and development, and security software development. I also provided tactical recommendations to clients in order to provide rapid security remediation with respect to any and all business-critical assets and information. Much of my daily work can be summarized as security research into various security vulnerabilities, both known and unknown. Generally, if I was not working directly with clients or engaging in a penetration test, I was either offering my expertise into written content such as security blogs, whitepapers, or building new tools and exploits for vulnerable software.

Provided managed services for Microsoft, Cisco, Datto, Alienvault, and many more professional business products as a security and information solutions expert for Cornerstone IT. Daily job functions consisted of deploying highly specialized and customized network solutions for a variety of small and enterprise-level businesses. Acted as the primary data security management professional, implemented stronger security policies, and helped to develop a robust framework for the company to conduct complex data and security risk assessments, vulnerability assessments, penetration tests, and architect enterprise security solutions.Also filled additional roles as a task-automation engineer, security analyst, malware analyst, security incident responder, and mentor to the various levels of technicians throughout the company.

While contracted under KFORCE, I performed desktop support and network management services for the Lubrizol Corporation at their Wickliffe HQ. My primary job functions included desktop troubleshooting, network cable management, and installation of new fiber, ethernet, and analog phone lines. I also provided support for VoIP and teleconferencing with Avaya and Cisco systems for Lubrizol across all the entire Northeast Ohio campuses. including Avon, Painesville, and Brecksville.

Providing Information Technology and Security solutions to customers, customer relations and support, technical support, network solutions and infrastructure architecture, and domain administration.

I owned and operated my private IT Consulting business under the name, Elec-Techs LLC from 2009 to 2016. I have provided IT solutions including Windows and Linux system administration, network administration, network architecture services, custom PC system builds, and active directory services deployment.I also offered services to small businesses and home network applications focused on network security, enterprise antivirus deployment, firewall configuration, malware analysis and reverse engineering.During this time, I trained in the field of penetration testing, software development, and programming for multiple programming languages including C, C++, Python, C#, and Ruby. I also performed cyber-forensic investigations and counter-intrusion services for private clients who were victims of cyber crimes such as ransomware, extortion, and fraud.

While serving at the 12/100th Civil Affairs & Psychological Operation's Training Battalion, I was responsible for the management of a entire battalion's overall supply and equipment storage, shipment, receiving, and security. Proper issuing and return of equipment, as well as stock auditing, and ordering of new stock was a common duty. The largest responsibility was maintaining the security and integrity of the unit's supply, as well as being the right-hand of the Commander (Lieutenant Colonel) for all issues regarding supply of food, water, ammunition, weapons, repair and maintenance equipment, office supplies, and incidentals, as well as ensuring the working condition and maintenance of all weapons and vehicles in our possession.I officially separated from service in 2015 and now am a member of the Inactive Ready Reserve.

While working for Monreal Consulting, I performed various network administration and security tasks, as well as operated with the helpdesk support staff on a daily basis. My work centered around supporting our clients' Cisco network infrastructure and supporting our clients' staff operations. Our operations were heavily focused on managing end-point security, asset inventory, and patch deployment. My primary contributions to this team were through support and troubleshooting of Windows systems and domains, as well as assisting in remote management of Cisco infrastructure, switches, firewalls, and VPN services.

I held the position of Deputy Administrator at the Cardinal Local School District, where I was instrumental in managing and optimizing a vast network infrastructure. My responsibilities encompassed the comprehensive upkeep of over 500 desktops, 200 laptops, 100 printers, and an array of networkable electronic devices, including but not limited to external storage units, Wireless Access Points, and Print Servers. A pivotal part of my role was to oversee the seamless operation of our network, governed by four primary servers and a centralized print server, which linked the four schools within our district.In addition to routine maintenance of over 900 network devices, my role expanded to that of a Security Administrator. Here, I spearheaded the implementation and management of our Sophos Security suite, diligently updating our systems to safeguard against the evolving landscape of cyber threats, including a myriad of viruses emerging daily on the internet.My expertise also extended to administering web filters, proxies, and network protection tools, ensuring a secure and appropriate online environment for our student body. These measures were critical in shielding students from harmful viruses and accessing sites unrelated or detrimental to their educational pursuits.Furthermore, my responsibilities included imaging and routine repairs of computers, along with timely replacement of malfunctioning hardware. While these tasks required a methodical and straightforward approach, my passion truly lies in the realms of information security and network administration. I am keenly interested in delving deeper into challenges such as penetration testing and advanced network security, areas where I can leverage my skills and enthusiasm to make a significant impact in safeguarding digital infrastructures.

I performed my internship while attending undergraduate courses at Kent State University at the Geauga county campus. My course studies in an Associate of Applied Business for General Information Technology afforded me the opportunity to work as a PC technician intern at the same campus I attended.I performed routine computer maintenance services, helped manage the wireless infrastructure, and troubleshooted common issues with student laptops and lab devices.