Ezekiel F.

Responsible for delivering high-level quality services to our clients. Among major responsibilities are: • Lead and execute advanced web and infrastructure (internal and external) penetration tests across complex enterprise environments; • Perform manual exploitation, vulnerability chaining and proof-of-concept development to demonstrate real business impact; •Conduct source code auditing and review to uncover logical and architectural weaknesses;

• Consulting services for red team operations, web/mobile/API penetration testing, and cloud environment assessments (AWS/Azure). • Perform in-depth threat analysis, SAST/DAST, and reverse engineering of proprietary applications. • Lead offensive engagements from scoping to reporting, collaborating with development and blue teams. • Vulnerability research in support of public and private sector clients. • Actively engaged in bug bounty programs with a focus on identifying security vulnerabilities in emerging technologies.

Responsible for delivering high-level quality services to our clients. Among major responsibilities are: • Led offensive security assessments, including red team exercises simulating real-world attacker tactics, techniques and procedures (TTPs). • Lead and execute advanced web and infrastructure (internal and external) penetration tests across complex enterprise environments; • Perform manual exploitation, vulnerability chaining and proof-of-concept development to demonstrate real business impact; • Conduct vulnerability hunting and responsible disclosure; • Conduct JAVA and .NET source code auditing and review to uncover logical and architectural weaknesses; • Assess and validate cloud and network configurations (AWS and Azure) against best-practice baselines.

Serving as a Senior Penetration Tester, responsible for delivering high-quality security solutions across a broad range of technologies and platforms. Core responsibilities included: • Conducting internal and external penetration tests and vulnerability assessments across traditional infrastructures and emerging technologies (cloud, IoT, hybrid environments). • Executing mobile and thick client penetration testing across platforms such as Android iOS, utilizing both static and dynamic analysis techniques. • Carrying out ATM security assessments with a comprehensive approach covering both logical exploitation and physical attacks. • Conducting security source code reviews in languages such as Java, .NET, and C/C++, supporting secure software development practices throughout the SDLC.

Provided on-site support as part of a security consulting team, delivering services including: • External and Internal Network Penetration Testing; • Web Application Penetration Testing; • Mobile Application Penetration Testing; • Security source code reviews in Java.

• Drafted and implemented a Data Loss Prevention (DLP) strategy for a major client to meet PCI DSS requirements. • Delivered end-to-end penetration testing of web apps, APIs, networks (internal/external), wireless, and mobile (iOS, Android, BlackBerry, Windows). • Executed security source code reviews in Java, .NET, and C/C++, aligned with Secure SDLC practices. • Conducted threat modeling, secure architecture reviews, and compliance assessments. • Performed advanced ATM and thick client security testing, including logical and physical security.

• Deployed and supported endpoint security solutions and antivirus products for enterprise clients. • Assisted clients in developing cybersecurity strategies, with a focus on incident response, malware analysis, and threat intelligence. • Conducted reverse engineering and proof-of-concept development for malware samples to uncover execution flows and exploit techniques. • Created detection signatures and Indicators of Compromise (IoCs) to improve threat detection capabilities. • Delivered client-ready security reports and strategic remediation plans.

• Provided technical support across multiple channels including phone, live chat, and on-site interventions for hardware, software, and internet service issues. • Diagnosed and resolved end-user incidents related to workstation performance, peripheral devices, and network connectivity. • Developed guides in endpoint security and hardening, system imaging, software deployment, and user account management within Windows and macOS environments. • Ensured adherence to ITIL best practices for incident response and contributed to knowledge base documentation to improve support efficiency.