Michael Lisi Email & Phone Number

Minoa, Ny, Us

Assist with village volunteer coordination, CTF challenge design, CTF event ops.

Utica, New York, Us

I handle the design and implementation of the CTF events for the new cybersecurity initiative being led by MVCC with support from Cyber Florida. I also work with CAE-C institutions across the country to develop content for these events.

Schaumburg, Il, Us

As a consultant at Halock, I work on internal, external, and web application penetration engagements as well as PCI testing for a variety of clients. I also perform on-site wireless testing as needed. Once the work is completed, I'm responsible for the development of client reports that highlight vulnerabilities found and recommendations to help remediate findings. This work sometimes includes IDS/IPS validation tests to help clients determine how their defenses fare against attacks.I'm familiar with numerous standard penetration testing tools (Kali, Metasploit, Burp Proxy/ZAP, Nessus, nmap, sqlmap, BeEF, nikto,...), and have developed my own tools and scripts to fill gaps that other tools don't quite address.

Rochester, New York, Us

During the BSides Rochester 2015 conference I gave a presentation about transitioning into penetration testing from other IT-related fields. The presentation covered my past work history as a Helpdesk Technician, Network Administrator, System Analyst, and Developer and how each position help me gain useful skills that allowed me to transition into a new position as a full time penetration tester. I discussed which skills that anyone in the above positions can work on and develop in their current role as well as other skills that they can work on outside of their job that would help position them more favorably to companies looking to make a hire.

Falls Church, Va, Us

I served as a software engineer for offensive and active defense cyber warfare research and development efforts. These efforts were focused on the development of new technologies in the areas of active defense and moving target defense. The most notable project I was involved in was the Active Repositioning in Cyberspace for SYNchronized Evasion (ARCSYNE) advanced cyber maneuver warfare capability that enables assets to perform IP-hopping with low resource consumption. My contributions to this program included Linux and FreeBSD kernel and network programming, programmatic interaction with IPSec policies and associations, as well as the system design and architecture of additional features implemented into the project. I was involved with the design and development of the system daemon processes, packet inspection and manipulation, and kernel modules.I also served as the team lead for the Northrop Grumman Penetration Testing Team. This team focused on penetration testing, network security assessments, and vulnerability assessments. These assessments ranged from basic white-box vulnerability scanning to full on black-box penetration tests with exploitation. I worked on the development and implementation of the team's collaborative pen test infrastructure which will help streamline and simplify the process of performing assessments.

Rome, Ny, Us

During my time with this employer I was involved in both the application development team as well as the network infrastructure team, which give me valuable experience in multiple areas of the IT environment. On the infrastructure side, I was tasked with end-user support, application management and support, as well as Active Directory user account management. I helped troubleshoot and rectify network environment issues, performed set up and installation of off-site ATMs, and repaired or replaced broken or defective equipment. On the application side, I became familiar with the financial server and software environment, and helped to support users when issues arose. Additionally, I was tasked with development projects to create or enhance functionality of the financial software or to prepare for new product offerings. I worked with outside vendors to integrate technologies like mobile-banking into the environment, which provided customers more accessibility to their financial information. I ensured that all critical financial reporting was performed on-time and delivered to relevant parties on a monthly, quarterly, and yearly basis. I managed the corporate Intranet site, and developed functionality to allow users to effectively communicate and share relevant information easily. Finally, I performed all mainframe updates and upgrades to keep the systems and financial software fully up-to-date. This included all scheduled and unscheduled maintenance, backups and data restoration, while maintaining a high SLA uptime.

Master Of Science - Ms, Cybersecurity And Information Assurance

Bachelor Of Science (Bs), Computer Science