Penetration Tester

Introduction:

A cybersecurity professional with extensive experience in threat detection, penetration testing, and incident response. Specialized in performing threat hunting, analyzing adversaries’ TTPs using the MITRE ATT&CK framework, and developing detection rules leveraging endpoint security, Office 365, and Azure logs. Expert in executing Red Team operations and adversary emulations with tools like Cobalt Strike and Atomic Red Team. Skilled in monitoring and analyzing security alerts to identify potential threats, reducing false positives, and enhancing detection capabilities. Proficient in conducting vulnerability assessments, network and web penetration testing, and managing phishing campaigns with advanced attack simulations, including 2FA bypass. Adept at malware analysis using EDR, SIEM, and OSINT tools, and collaborating with technical teams to contain and remediate threats. Experienced in configuring network devices, managing VMware infrastructures, and optimizing organizational processes. Acted as a trainer and mentor for new team members, onboarding procedures, and knowledge transfer sessions.

Responsibilities:

• Perform threat hunting and develop detection rules to identify and mitigate security threats.
• Execute Red Team operations and adversary emulation using advanced tools.
• Conduct vulnerability scans, network, and web penetration testing.
• Monitor and analyze security alerts, escalating incidents based on severity.
• Collaborate with technical teams to investigate and remediate live incidents.
• Document findings and provide recommendations for incident resolution.
• Manage phishing campaigns and simulate attacks, including bypassing security measures.
• Optimize detection systems to minimize false positives and alert noise.
• Configure and maintain network devices, servers, and VMware infrastructures.
• Mentor and onboard new team members, sharing knowledge and methodologies.