Penetration Tester – DOD SkillBridge Internship                October 2023 – Present

TrustFoundry – United States (Remote)

To have thorough customer engagements to improve
security as efficiently as possible. We know this involves
carefully listening and understanding to our customers. Our attention to customers’ challenges, focus on intelligent solutions, and our genuine passion for security drive us to consistently deliver outstanding results.

• Performed extensive internal and external network penetration tests for two clients using manual and automated techniques to find 38 meaningful and verifiable findings across 429 systems/servers.

• Conducted one thorough web application assessment on two APIs to find 17 findings; performed cross-site scripting (XSS), Structured Query Language (SQL) injection (SQLi), and cross-site request forgery (CSRF) attacks.

• Expertly utilized industry-standard tools and techniques (Kali Linux, Nmap, Burp Suite Professional, Metasploit, Mimikatz, Impacket, Nuclei, Amass, CrackMapExec, Responder, Nessus, Shodan) in all live penetration tests.

• Wrote and delivered two clear and concise timely reports, providing clear insights and actionable mitigation strategies for all clients; peer-reviewed one more penetration test report before delivering to the customer.

• Leveraged automation, programming, and scripting skills (Python, Bash, PowerShell, C, C#, VBA, PHP, JavaScript).

• Identified and exploited vulnerabilities in Windows and Linux systems/servers, enhancing system security.

• Applied comprehensive knowledge of methodologies and frameworks (OWASP, PTES, MITRE ATT&CK, Cyber Kill Chain, NIST, ISO, PCI-DSS) across three penetration tests and web application assessments.

• Developed sophisticated exploits and executed advanced chained/multi-staged attacks for every PenTest.