Penetration Tester – DOD SkillBridge Internship      October 2023 – February 2024

TrustFoundry – United States (Remote)

To have thorough customer engagements to improve
security as efficiently as possible. We know this involves
carefully listening and understanding to our customers. Our attention to customers’ challenges, focus on intelligent solutions, and our genuine passion for security drive us to consistently deliver outstanding results.

• Performed internal and external network penetration tests for four clients using manual and automated techniques to find 48 meaningful and verifiable findings across 513 systems/servers.

• Conducted two thorough web application assessments on three APIs to find 20 findings; performed cross-site scripting (XSS), Structured Query Language (SQL) injection (SQLi), and cross-site request forgery (CSRF) attacks.

• Expertly operated industry-standard tools and techniques (Kali Linux, Nmap, Burp Suite Professional, Metasploit, Mimikatz, Impacket, Nuclei, Amass, CrackMapExec, Responder, Nessus, Shodan) against 516 systems/servers.

• Wrote and delivered eight clear and concise timely reports, providing clear insights and actionable mitigation strategies for all clients; peer-reviewed three more penetration test reports before delivering to customers.

• Leveraged automation, programming, and scripting skills (Python, Bash, PowerShell, C, C#, VBA, PHP, JavaScript) by coding seven new scripts on the fly during live tests to automate tasks and streamline data parsing.

• Identified and exploited 80 vulnerabilities in Windows and Linux systems/servers, enhancing system security.

• Applied comprehensive knowledge of methodologies and frameworks (OWASP, PTES, MITRE ATT&CK, Cyber Kill Chain, NIST, ISO, PCI-DSS) across nine penetration tests and web application assessments.

• Developed sophisticated exploits and executed advanced chained/multi-staged attacks during 100% of tests.