Theodosios Psarras

Red Team Operations: -Full-scope adversary simulations and emulations (APT behavioral modeling) -C2 infrastructure deployment and management (Silver C2, custom tooling) -Custom payload development, stageless/staged delivery, and EDR evasion -OPSEC-focused lateral movement, persistence, and exfiltration chains Penetration Testing: -Web application penetration testing for SaaS platforms (OWASP Top 10, business logic flaws) -Network penetration testing - internal, external, segmentation bypass -Cloud penetration testing (AWS/Azure/GCP misconfigurations, IAM abuse) -Active Directory attack chains - Kerberoasting, DCSync, ACL abuse, trust exploitation -Wireless and physical layer assessments Reporting & Compliance Alignment: -Executive and technical report writing tailored to stakeholder level -Findings mapped to compliance frameworks - SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS -Risk-rated remediation guidance with actionable timelines -Post-engagement debrief and retesting validation

Engagement Delivery: -Conducted comprehensive network, web application, and cloud penetration tests across hybrid and on-prem environments, identifying critical attack paths and chained exploit scenarios -Supported full-cycle client engagements - scoping, threat modeling, execution, and reporting - contributing technical depth and clear business impact documentation at every phase -Participated in client-facing meetings to define assessment objectives, align on rules of engagement, and present findings with executive-level clarity Red Team Operations: -Executed adversary simulations and emulations, replicating real-world APT TTPs across the full MITRE ATT&CK kill chain -Deployed and operated C2 infrastructure and payloads tailored to client environments and EDR stacks -Participated in physical red team operations including social engineering scenarios, access control bypass, and insider threat simulations Compliance & Risk Alignment: -Mapped penetration testing findings to SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS control frameworks, supporting compliance-ready remediation roadmaps -Authored technical and executive-level reports with risk-prioritized recommendations and measurable remediation timelines -Supported retesting cycles in collaboration with blue teams and development stakeholders to validate remediation effectiveness Methodology & Tooling: -Contributed to improvement of internal offensive methodologies and testing playbooks -Developed reusable automation scripts for enumeration, post-exploitation workflows, and reporting efficiency

Founded Kong Security Consulting as a boutique offensive security firm operating one client at a time full team, full capacity, every engagement. We think like attackers. The work spans the full adversary lifecycle: red team operations, adversary simulation, physical penetration testing, and post-incident response with attribution-grade investigation. Beyond-compliance validation for clients who need to know what real attackers would actually do and find. Offensive Operations: - Red team and adversary simulation engagements - Physical penetration testing - RFID cloning, access control bypass, mantrap defeat, CCTV blind spot mapping, surveillance evasion - Social engineering, USB drop campaigns, insider threat simulation - Internal lateral movement and unattended asset exposure testing Emergency Incident Response & Attribution: - Foothold identification, lateral movement mapping, controlled containment - Reverse-trace of attacker infrastructure to surface the original source IP and identify the threat actor - Evidence packaged with chain of custody to Cyber Police evidentiary standards prosecution-ready Engagement Standards: - All work conducted under signed NDA and Rules of Engagement - Structured remediation reports with executive summaries for security leadership and compliance stakeholders - One client at a time. No parallel engagements, no diluted attention.

-Operated unmanned aerial systems (UAS) for real-time battlefield reconnaissance and situational awareness. -Served as a remote mission supervisor, monitoring live tactical feeds from frontline units to document and ensure compliance with engagement protocols. -Collected, tagged, and archived operational footage for post-mission analysis and accountability. -Supported strategic decision-making by delivering accurate geospatial and visual intelligence under high-pressure conditions.

-Served as a Captain and Task Force Commander within an international military context. -Led high-risk recon and offensive operations, specializing in physical and digital intelligence gathering. -Honorably discharged following combat injury. Decorated for leadership and battlefield performance under extreme operational pressure.

-Operations conducted under NDA — details protected due to sensitivity. -Focused on high-stakes team operations, situational leadership, and mission execution in dynamic, high-pressure environments.

Managed network infrastructure and secure equipment deployments across high-traffic operational environments including national exhibitions and large-scale sports operations. Infrastructure & Network Operations: -Designed and executed secure equipment deployments ensuring configuration integrity, operational continuity, and risk mitigation across critical environments -Managed device configuration, operational validation, and continuous support for mobility-critical systems applying disciplined troubleshooting and secure provisioning procedures -Coordinated physical-layer infrastructure including cabling, power management, equipment positioning, and operational readiness across multiple concurrent deployments Training & Security Awareness: -Delivered user enablement sessions in Greek and English ensuring compliant and secure product usage through structured instruction -Trained support staff in operational best practices, incident prevention, and safe handling procedures reinforcing a security-first mindset and process discipline

-Managed and programmed CNC 4-axis drill tables and HYDRA 800-ton fully automated die-cast hammer press machines. -Calibrated robotic extractors ("clumps") to ensure precise timing and handling in the automated press cycle. -Operated critical heavy machinery including forklift (3.5T & 8T), crane bridge, steel blasting units, and furnace towers. -Wrote production codes and implemented parameter updates for CNC and press systems to optimize performance. -Directed logistics for truck deliveries and coordinated rotating 24/6 shift schedules for a high-output team. -Supervised and trained new employees, conducted operational audits, and maintained workplace safety standards. -Led Quality Control for production accuracy using high-precision measurement systems (up to 0.000001 cm). -Reported QC and operational metrics through the internal network, ensuring real-time monitoring and traceability. -Maintained this level of performance without any days off, working intensive 14-hour shifts continuously.

Performed secure hardware rebuilds and system provisioning for legacy Dell, IBM, and early-generation MacBook systems, including BIOS hardening, firmware updates, and OS deployments across Windows XP, Vista, 7, macOS and Linux. -Executed data sanitization procedures using pre-BitLocker methods such as multi-pass disk wiping, drive degaussing, low-level formatting, and secure media destruction—ensuring compliance with internal data-retention and confidentiality requirements. -Built and configured custom project PCs and laptops from barebone state, implementing manual security controls (account hardening, NTFS permission structuring, secure user profiles, partitioning schemes) before modern endpoint security solutions existed. -Conducted incident-level diagnostics for compromised or misconfigured systems, isolating malware, resolving boot-level corruption, and rebuilding secure environments on aging hardware. -Developed secure imaging workflows for rapid deployment, including pre-hardened OS templates, registry lockdowns, local policy restrictions, and post-install security validation checks. -Provided on-site legacy system security support, mitigating vulnerabilities inherent to outdated operating systems while extending operational lifespan through hardening, patching, and compensating controls. -Collaborated with warehouse operations and support teams using ticketing and logistics systems to track assets, ensure chain-of-custody integrity, and meet strict SLA requirements for sensitive hardware handling. -Acted as the internal Subject Matter Expert (SME) for secure handling and refurbishment of legacy platforms and sensitive data-bearing devices.

Trainer for the Hellenic offensive warfare special forces - And international allies. - Close quarters battle training - Fast recognition shooting while moving training - Mountain survival school (summer-winter) - Parachuting instructor. *(masterclass including skydiving on land 2Km-4Km-6Km, Skydiving sea landing (day-night) helicopter jumping on sea, plane and helicopter jumps 200m with static rope and skydiving target recognition and formation) - Saboteur-exploiter training. (Basic explosives assembly) - Close combat firearms and assault rifle aim training. *(masterclass including 24 different weapons) - Machine gunners A,B and C class shooting training. *(masterclass including heavy machine guns and flexible combat anti air turret setup) - Basic training for task force group leaders. - Mud obstacle and battle movements in various terrains training. - Airborne division combined trainings - Navy combined trainings. - Star navigation school. - Guerilla warfare mountain rangers school. - Basic special forces training for high ranking officers in order to aquire or maintain rank

Trainee for short term (5 year) lease for Hellenic army (Offensive warfare special forces mountain rangers division) - Basic army training - Extended special forces training - Corporal's rank School - Basic training for militant k9 use. - Extensive parachuting training - CQB training - Basic training for special forces trainers - Extended training for offensive warfare training - Specialized training for planning and leading on battlefield - Training for parachuting instructor - Controlling crisis masterclass - Special training for emergency negotiations based on NLP. - Special training for investigation and extraction of information - Special training for task force group leaders. - Sergeant rank school - War masterplan and leading battle masterclass - Staff sergeant tank school