I'm Drew. An offensive security engineer with 11 years of experience subverting security systems across web, networks, and cloud environments.
A Decade in InfoSec
I started to learn how to pentest back when I was developing legacy web applications for a small shop in Morrisville, PA. I didn't know it at the time, but I was SQL-Injecting my own web apps while trying to troubleshoot and debug. I figured if I could do that, anybody with access to my site could too.
From there I moved into consulting, where I stayed for nearly 6 years, working on startups, urgent care centers, banks, Fortune-500 companies, you name it; I probably worked on it.
I learned a lot across a wide variety of security domains and environments and developed a passion for learning how to emulate real world threat actors.
In 2022 I took it internal, working for a multinational database management company; and working with a close-knit team instead of a new client every 2 weeks.
Today, I work for one of the North American leaders in networking hardware, smart home devices, and telecommunications equipment.
While I love my job, I'm interested in branching out and exploring new opportunities and side projects and continuing to learn everyday about the current threat landscape.
My Interests
InfoSec is both my job and my hobby. I love hacking on new things and trying to find vulnerabilities to exploit. I follow Threat Actor tradecraft the way others might follow sports teams (GO BIRDS!!!).
Outside of that you can find me playing the season's latest video game release, employing creative problem-solving skills in a homebrew D&D campaign, or out on the golf course enjoying the weather and not worrying about the vulnpocalypse (Or whatever AI Bros are saying these days).
Disclaimer
All opinions, stories, and mistakes expressed on this site are my own. None of this ties to, or represents, the philosophy or opinions of my former and current employers.