FedRAMP, CMMC, FISMA, & Other Compliance Frameworks; Pentesting & Red Team Operations:- Development of low-visibility offensive architecture, creating automation in deployment and configuration. (Mythic, Sliver, Gophish, Evilginx, Offensive Pipeline)

FedRAMP, CMMC, FISMA, & Other Compliance Frameworks:- Internal and external assessments- Deliverables with actionable items and steps to remediationWorked with large profile customers: Palo Alto, Okta, Snowflake, IBM, Amazon AWS, SAP NS2, and others.

Hands-on experience working with the latest technologies in the following disciplines:- Reverse engineering- Advanced forensics- Network architecture- Protected data- Mobile analysis (Android/iOS)

Red-Team activities; including but not limited to:- Phishing via crafted emails and malicious payloads- External scanning with passive and active tools- Internal testing with high efficacy utilizing Cobalt Strike- Technical writing with manually-generated reports

Creation and improvement of education & training materials for FIGMO Security. Fabrication of virtual machines (VirtualBox/VMWare) that test the knowledge of basic red-team practices and procedures:Network monitoring and reconnaissance, Machine enumeration and fingerprinting, Vulnerability scanning, Exploitation, and Privilege escalation.