Ruben Boonen - b33f

Director of Engineering

San Diego, California, United States13 yrs 6 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in advanced network exploitation techniques.
Strong background in Windows internals and post-exploitation.
Proven track record in delivering high-impact security assessments.

Stackforce AI infers this person is a Cybersecurity Expert with a focus on Offensive Security and Vulnerability Research.

Contact

Skills

Core Skills

Network SecurityVulnerability AssessmentPenetration TestingComputer SecurityReverse EngineeringWeb Application Security

Other Skills

App/Inf Security AssessmentsBacktrackBashComputer ForensicsDNSExploitationHTML 5IDSInformation SecurityInformation Security ManagementInfrastructure security assessmentInternet Protocol Suite (TCP/IP)Kali LinuxLinuxLocked Down Desktop Environment Breakouts

About

==| About |== Antiquarian, I spend most of my time hacking on Endpoint. My main areas of focus are post-exploitation, reverse engineering, systems programming, vulnerability research and re-writing bytes in memory. I am also working on my developing interest in Android userland and embedded device vulnerability research. ==| Socials |== » Domains KnifeCoat Blog - https://knifecoat.com/ FuzzySecurity Blog [Archived <3] -> http://www.fuzzysecurity.com/ » Twitter @FuzzySec -> https://twitter.com/FuzzySec » GitHub https://github.com/FuzzySecurity » Linktree https://linktr.ee/fuzzysec

Experience

13 yrs 6 mos

Total Experience

2 yrs 3 mos

Average Tenure

6 yrs 6 mos

Current Experience

Calypso heavy industries (chi)

Director

Jan 2024 – Present · 2 yrs 5 mos · London Area, United Kingdom · Remote

In January of 2024 I started Calypso Heavy Industries (CHI) as a way to bring high-quality Offensive technical content to industry partners.

Ibm

3 roles

CNE Capability Development Lead

Sep 2023 – Present · 2 yrs 9 mos

As CNE Capability Lead, I spend my time on R&D and execution of advanced network exploitation techniques, utilizing deep technical expertise in Windows internals, post-exploitation, and kernel-level exploit development. My work involves developing sophisticated attack vectors, enhancing offensive capabilities, and conducting high-impact assessments. I run my code on your critical infrastructure ✌🏻

advanced network exploitation techniquesWindows internalspost-exploitationkernel-level exploit developmentNetwork SecurityVulnerability Assessment

Senior Managing Security Consultant (US)

Feb 2023 – Sep 2023 · 7 mos

To better service some of our critical US clients I relocated, in my current role, to San Diego, California.
At IBM I work on the Adversary Services team, one of the premiere teams in offense globally. We provide advanced security assessments for public and private sector clients. Our verticals include many critical areas, like finance, telecommunications, energy and manufacturing.
A large portion of my time is spent on R&D for tooling and technical operational requirements. I make weird things and have a special interest in Windows internals, pointer-math and post-exploitation tradecraft.

R&Dtoolingtechnical operational requirementsWindows internalspointer-mathpost-exploitation tradecraft+2

Senior Managing Security Consultant (UK)

Dec 2019 – Feb 2023 · 3 yrs 2 mos

At IBM I work on the Adversary Services team, one of the premiere teams in offense globally. We provide advanced security assessments for public and private sector clients. Our verticals include many critical areas, like finance, telecommunications, energy and manufacturing.
A large portion of my time is spent on R&D for tooling and technical operational requirements. I make weird things and have a special interest in Windows internals, pointer-math and post-exploitation tradecraft.

R&Dtoolingtechnical operational requirementsWindows internalspointer-mathpost-exploitation tradecraft+2

Fireeye, inc.

Applied Security Researcher

Jul 2018 – Nov 2019 · 1 yr 4 mos · County Dublin, Ireland

Within the Technical Operations & Reverse Engineering (TORE) team my primary mandates included: analysis of attacker TTP's, dynamic and static reverse engineering, offensive capability demonstration, delivering practical research to demonstrate forward-looking detection capabilities and writing detection logic for FireEye's endpoint technologies.

analysis of attacker TTP'sdynamic and static reverse engineeringoffensive capability demonstrationwriting detection logicReverse EngineeringComputer Security