Thomas Ellis Email & Phone Number

Chicago, Il, Us

Chicago, Illinois, United States

Led development team building External Attack Surface Management (EASM) application with Python, AWS Chalice, Lambda, and Terraform. - Redesigned from single-use tool to scalable, AWS cloud-native application supporting multiple concurrent client projects. - Automated application and infrastructure deployment using Azure DevOps pipelines. - Created Docker containers and other components to collect data from various online databases such as Shodan/Censys. - Parallelized mass processing of collected data to MongoDB, handling data for thousands of hosts in minutes. - Developed backend API and authentication mechanisms using API Gateway and Cognito. - Built standardized library of code for use across the entire application, stored in Azure Artifacts. - Provided guidance and mentorship to 5 team members for professional and technical development. - Leveraged application to evaluate external security posture and identify potential attack vectors for 20+ client projects.Shipped beta version for an automated social engineering platform using Python, AWS Chalice, Lambda, and Terraform. - Developed capabilities to perform mass email, SMS, and vishing campaigns via Twilio. - Assisted with creation of mechanisms to track campaign metrics and store them to be consumed by clients via API. - Generated custom campaign pretexts and phishing website content for multiple client projects. - Leveraged existing code from the EASM platform to reduce time spent deploying infrastructure, developing backend API(s), and integrating with AWS Cognito by 2 months.Performed penetration testing for a variety of clients, including network, physical, and wireless testing.Expanded the use of Agile methodologies using Azure DevOps within the broader 40+ person Offensive Security team. - Built out processes and procedures for roadmap creation, sprint planning, and regular stand-up meetings.

Chicago, Illinois, United States

Created Beacon Object File (BOF) kit for Cobalt Strike using C and inline x86 Assembly. - Implemented code to counter Windows defense mechanisms, such as AMSI and ETW, using direct system calls (syscalls). - Improved the HellsGate / HalosGate technique for direct syscalls via ntdll.dll to bypass detection by Cylance EDR.

Chicago, Illinois, United States

Developed Terraform scripts to automatically deploy Layer 4 (VPC) and Layer 7 (WAF) network security capabilitiesEngineered repository copy mechanism via AWS ECS, Lambda, and CodeCommit.Wrote code to pull threat actor data from an internal feed and display within a reconnaissance tool.

St Louis, Missouri, United States

Researched security vulnerabilities in connected cars by blending Automotive Grade Linux (AGL) with OP-TEE.Worked on securing code randomization for IoT devices using ARM TrustZone to protect against code reuse attacks.

Greater St. Louis Area

- Assist students with course material and C/x86 Assembly coding assignments by hosting office hours- Instruct students in the core concepts of data structures and algorithms to help prepare them for technical interviews

Raleigh-Durham, North Carolina Area

Produced Python Flask API and Angular GUI for the execution of bulk actions in internal access request tool.

Greater St. Louis Area

Worked on a tool using an expectation maximization (EM) algorithm to determine what types of HPV may be contained in a particular patient's genome

O Fallon, Missouri

Automated server workflows and release development cycles using Chef, Jenkins, and Salt.

Bachelor Of Science, Computer Engineering

Activities and Societies: Engineers Without Borders, Tau Beta PiMinors: Business Strategy, Math

Education record

Activities and Societies: National Honor Society, Kathleen Murphy Scholars, Totino-Grace Engineering Institute, Cross Country, Track.