Senior Cybersecurity Consultant
Current- Currently leading assessors, and performing an audit of the Privacy Program for the largest social media site maintaining close working relationships with key stakeholders in formulating complex solutions to further their maturity in Data Lifecycle Management, Transparency, Consent, and Security.- Created innovative capability to perform dark web data collection using a scalable self-sufficient botnet capable of bypassing common bot prevention mechanisms. So far collected over 5TB in various incident response cases, achieving results in cases were competitor could not download any data from these publications.- Developed the Digital Footprinting service, capable of providing an outside-in view of an organisation's exposure from the perspective on an attacker, with increased functionality, improved responsiveness, and standardised reporting. This is now standard across all due diligence and maturity assessments.- Perfomed, and led mutliple web application penetration tests, finding critical issues that resulted in complete loss of protection, including stored XSS CSRF achieving full Account Takeover, and access to sensitive data through Broken Access Controls and Insecure Direct Object References.- Audited network traffic, performed source code review and conducted penetration tests of IP Cameras, Network Video Recorders, thick client application, and web servers for one of the largest security camera vendors due to a mandated court judgement requiring an expert report for their defense.