Developed PoC code for CVEs without public PoC to reproduce compromise.Identified Critical Vulnerabilities in custom web applications and helped customers remediate them. Led multiple Web App Penetration Tests for Fortune 500 companies from the initial scoping to the final debrief.Performed Penetration Tests on multiple Fortune 500 companies. Led multiple Penetration Tests on multiple Fortune 500 companies from the initial scoping to the final debrief.Performed Red Team Engagements simulating financially motivated and nation state threat actors.Performed Purple Team Engagements on critical networks to help clients develop better detection rules. Led multiple Purple Team Engagements to evaluate the performance of client detection capabilities from the initial scoping to the final debrief.

Developed PoC code for CVEs without public PoC to reproduce compromise.Identified Critical Vulnerabilities in custom web applications and helped customers remediate them. Led multiple Web App Penetration Tests for Fortune 500 companies from the initial scoping to the final debrief.Performed Penetration Tests on multiple Fortune 500 companies. Led multiple Penetration Tests on multiple Fortune 500 companies from the initial scoping to the final debrief.Developed External Scanning TTPs for clients. Managed the External Scanning process to ensure findings were identified and tracked.Performed Red Team Engagements simulating financially motivated and nation state threat actors.Performed Purple Team Engagements on critical networks to help clients develop better detection rules. Led multiple Purple Team Engagements to evaluate the performance of client detection capabilities from the initial scoping to the final debrief.

Developed cybersecurity policies for customers to comply with regulatory frameworks.Conducted threat model based risk assessments to identify gaps in controls.Helped create custom malware to emulate advanced threat actors.Executed multiple successful penetration tests to help customers identify gaps in their cybersecurity posture, and to understand the impact of threat actors exploiting those gaps.

Worked on inter-department (Information Technology Services and Information Security Office) project team designing, testing, and implementing McAfee ePO related projects.Wrote McAfee Host Intrusion Prevention System (HIPS) rules to protect against malware. Encrypted machines using McAfee Endpoint Encryption. Designed ePO dashboards to provide System Administrators with regularly updated analytics.

Performed penetration testing of critical software used internationally to comply with Anti-Money Laundering (AML) and Anti-Terrorist Financing (ATF) laws, International Sanctions, and Politically Exposed Persons (PEP) programs.Developed automated SQLi vulnerability scanner, wrote user’s manual, and trained QA staff to perform vulnerability testing on other products.Drafted Cyber Security Policy using the NIST Cyber Security Framework

I edited visual basic code to make it more intuitive, performed database entry, and edited sql statements. After, this internship I was asked to apply for the paid co-op at Liberty Pumps when I go on co-op.

I gained experience in setting up subnets, and learned about web based attacks.