Part of the Deloitte Global Red Team, tasked with challenging the security of Deloitte through Red Team exercises. For all campaigns, the focus is on providing actionable results that allow for remediation plans to be formed on a global scale and to further increase the resilience and security posture of the company.

Working as a technical expert on internal penetration tests, red teaming aswell as web and API application assessments. Application assessments were primarily carried out in a white-box manner. Leading a small team where my main function was to provide mentoring in technical questions as well as manage career development.

Leading advanced internal penetration tests, purple teams and complex assignments:- Scoping, planning and overseeing these assignments while providing a main point of contact for clients.- Conducting assignments as the technical lead on the project- Mentoring and teaching new team members- Reviewing reports from a technical and quality standpointResponsibilities also include overseeing the internal development team - creating new tools, researching new attacks and techniques, as well as maintaining our internal methodology for such assignments.

Taking on Senior consultant responsibilities:- Defining the scope of upcoming projects- Keeping contact with clients during the project’s lifecycle- Mentoring junior co-workers- Leading penetration tests and coordinating colleagues on projects- Reviewing reports from a technical and quality standpointConducting IT Security projects including: - Testing internal infrastructures, red teaming, and external infrastructures - Penetration testing web applications - Penetration testing binary applications (static and dynamic analysis) on C# .NET and Java applications- Phishing exercises (creating malicious attachments and URLs) and setting up environment for sending e-mails (SPF,DKIM)

Conducting IT Security projects including: - Testing internal infrastructures and external infrastructures - Penetration testing web applications - Penetration testing binary applications (static and dynamic analysis) on C# .NET and Java applications- Phishing exercises (creating malicious attachments and URLs) and setting up environment for sending e-mails