Feb 2022 – Mar 2023 · 1 yr 1 mo · Copenhagen, Capital Region, Denmark

Sep 2020 – Feb 2023 · 2 yrs 5 mos · Copenhagen, Capital Region, Denmark

• Security Assessments & Penetration testing types include:
• Offensive security (Team lead)
• Physical Security & Covert Entry ( Team Lead)
• Hardware: ATMs, CCTV Cameras, IoT, ...
• Wireless , Bluetooth , RFID, Radio
• Web Apps
• Networks
• Internal Assessments
• Laptop Assessments
• PCI Tests
• PACS assessment / security

Mar 2020 – Sep 2020 · 6 mos · Copenhagen Metropolitan Area

• In this position, I performed a penetration test on a global network, and helped to mitigate all discovered risks/vulnerabilities. I performed OSINT on a number of clients to help patch vulnerabilities and instruct on risk assessment. I created and presented numerous security training seminars on penetration testing, security vulnerability tools and their uses.
• Performed penetration tests on a global network comprised of more
• than 1700 IPs, using Shodan, Nmap, Maltego, Eyewitness and
• Burpsuite, resulting in the discovery of more than 50 critical- and
• high-risk vulnerabilities to then resolve alongside my client
• Tested a corporate operating system image with CIS Benchmark and
• open-source assessment tools to facilitate hardening the image prior
• to its company-wide release
• Presented several security training seminars to educate cyber security
• staff on red team engagement methods with the purpose of mitigating
• potential threats
• Developed a custom security tool to automate large-scale pentests
• and the gathering of OSINT information, using Shodan, Nmap, Python
• and Bash
• Provided ongoing security assessments and pentests for an app under
• development and guided developers on security best practices
• Conducted OSINT assessments for numerous clients

Jan 2020 – Present · 6 yrs 4 mos · Unknown · On-site

• Perform black team engagements worldwide on highly secured facilities, locations and events.

Nov 2018 – Mar 2020 · 1 yr 4 mos

• In this position, I performed penetration testing, security assessment, security software development, security tool development and risk management/assessment. I worked for numerous companies as a freelance pen tester and security auditor while working remotely. I worked either alone or in small teams for specific projects, including: drones, banking industry, ATM machines, security cameras, web apps, web sites and more.
• Performed small- and large-scale internal network penetration tests
• for a variety of clients on Linux, Windows, iOS and Android,
• discovering a number of vulnerabilities to then resolve with my
• clients, including:
• Identified a vulnerability in the firmware for a line of security
• cameras that allowed for remote login, similar to the vsftpd 2.3.4
• exploit
• Discovered a vulnerability on a client’s banking web app that
• allowed for unauthorized login and admin-level access
• Performed a wireless pentest to intercept communication and
• take control of commercial drones
• Developed a diagnostic toolkit for my client to test the security of
• future drone models and software updates

Aug 2016 – Oct 2018 · 2 yrs 2 mos · Bonn Area, Germany

• In this position, I worked as a security researcher and penetration tester, helping to develop custom security based software for vulnerability discovery and reverse engineering. Working mostly in C, C++ and Python, I helped to create tools that would better reverse engineer code in order to locate exploits (similar to IDA but with more features).
• Utilized GDB and IDA Pro to reverse-engineer open-source software
• and malware to uncover vulnerabilities and ownership signatures
• Helped develop a custom tool similar to IDA Pro that would automate
• vulnerability discovery

Jul 2016 – Present · 9 yrs 10 mos · Global · On-site

• Chief instructor & Black Team Lead

Feb 2015 – Jul 2016 · 1 yr 5 mos · Columbia MO

• Performed security reviews of applications, websites and code review
• Developed GPS tracking software to track real time vehicle movement
• Provided consulting on various projects in regards to security and
• system management

Jan 2013 – Present · 13 yrs 4 mos · Remote

• Covert Entry / Black Teaming
• Physical Pentesting
• Physical Security Auditing
• Physical Security Instruction & Training
• Offensive Security pentesting including:
• IoT, cameras, ATMs, etc
• Web apps / APIs
• Networks (internal / external)
• Wireless, Bluetooth & Radio
• Covert Entry & Elicitation Training
• 5 day covert entry training class
• 2 day elicitation training class
• 1 day covert entry lecture, Q&A

May 2012 – Jan 2015 · 2 yrs 8 mos · Columbia, Missouri Area

• In this position, I worked as a security researcher, helping to develop new security based software as well as hardware models. Working mostly in Haskell I worked on various security research projects ranging from chips to drones