• Performed web application, API, and external and internal network penetration testing for clients of various sizes.• Composed narrative-based reports to clearly articulate identified vulnerabilities and educate clients on remediation and mitigation efforts.• Conducted thorough reviews of client deliverables to ensure high testing standards, completeness, and accuracy of reports provided by the CDW Offensive Security team.• Communicated effectively with client points of contact (POC) before, during, and after each engagement to manage expectations, uphold project timelines, and ensure a superior customer experience.

• Performed external, internal, and web application penetration assessments, including manual validation and targeted exploitation of identified vulnerabilities to demonstrate their impact.• Conducted Assumed Breach penetration assessments on Active Directory environments using C2 infrastructure to emulate real-world threat actors. This involved establishing persistence, escalating account privileges, discovering sensitive files via network shares, capturing and cracking hashed credentials, and moving laterally across the network to target high-value systems.• Composed narrative-based reports to effectively articulate identified vulnerabilities and educate clients on remediation efforts.• Created internal processes and documentation to maintain high testing standards, including assessment-specific methodologies and the provisioning of on-premise and cloud-based network infrastructure.• Mentored and educated junior team members to share knowledge, best practices, and support their professional development in security.

• Provided cybersecurity guidance and strategy to clients.• Performed technical penetration testing and application security assessments.• Assisted in developing internal processes, procedures, templates, and methodologies for Evolve Security's penetration testing team.• Developed pragmatic solutions to help organizations of various sizes mitigate technology risk.

CyberSecurity Non-Profit (CSNP) is an organization dedicated to promoting security education and awareness, and hosts a variety of events featuring networking, presentations, workshops, and hackathons in Chicago, Austin, Boston, Charlotte, Dallas, and Houston.

• Advised clients on aligning their policies, procedures, and technologies with the Payment Card Industry Data Security Standard (PCI DSS v3.2.1).• Performed SOC 2 assessments to assure clients that their organizations have effective controls in place for security, availability, processing integrity, confidentiality, and privacy.

Cyber Security, Data Privacy, Data Analytics, Identity and Access Management (IAM), Governance, Risk and Compliance (GRC), IT Audit, and Cyber Workforce Development.

Supported non-profit organizations with security assessments, including wireless vulnerabilities, mobile applications (iOS), physical vulnerabilities, external vulnerabilities, and social engineering phishing campaigns.