DeepCove Cybersecurity

As a Senior Manager at DCC, I oversee the offensive security (proactive testing) services. The team over at DCC leverages AI / LLMs for our operations. Other than that, my responsibilities include:

- Lead and mentor a team of talented hackers
- Build adversary emulation capability
- Research APT groups and their TTPs
- Conduct research on AI/LLM integrations to improve the traditional penetration test methodology.
- Lead and manage different assessments and testing projects (web, API, mobile, desktop, internal/external infrastructure, wireless, etc.).
- Develop methodology and learning plan with a focus of training other testers.
- Develop penetration testing infrastructure, processes, and policies (SOPs).
- Carefully asses products and vendors before coming into partnership agreements or purchase, leading to multiple CVE submissions 
- Liaison with and perform third-party vendor risk analysis, and testing. 
- Manage vulnerability triaging processes for 10+ applications on a continuous basis.
- Help develop and integrate next-gen security products.
- Conduct regular security assessments and communicate findings and recommendations to stakeholders.
- Participate in “huddles” and provide attackers’ perspectives in incidents.
- Involved in purple-team style assessments to help detect and response capabilities.

Sr. Manager, Proactive security

Rogers Cybersecure Catalyst, Toronto Metropolitan University

Mentor

OWASP® Foundation

OWASP Toronto Co-organizer

Medium

I write about bugs and vulnerabilities I discovered in bug bounty programs. It may also contain casual thoughts on InfoSec-related and non-related matters. https://popalltheshells.medium.com/

Author

Seneca College

Giving back to the InfoSec community which has been good to me by teaching a course in Cyber Security and Threat Management, specifically Ethical hacking and Vulnerability testing.

This course introduces students to what and who ethical hackers are, how they are different from non-ethical hackers, and why/how they are essential for protecting data from cyber-attacks. Students will look closely at the different types of tests that can be conducted by ethical hackers to assess the readiness of an organizations system to withstand cyber-attacks. The course also investigates the methods and tools used in cyber-attacks and their countermeasures, as well as available security resources that every organization needs to possess to be able to counter the different cyber-attack "types".  This will equip the students with the knowledge and techniques to successfully consider the different methods of combating hackers and cyber-attacks.

Professor

RSM Canada

As a supervisor within the offensive security team, my main responsibilities are not limited to performing penetration testing and red-teaming activities. Some of my duties include:

- Perform testing and understand clients’ requirements based on different standards: PCI-DSS, NIST, ISO27K, HIPPA
- Part of pursuit team that brings in over $100k revenue to date
- Lead and worked with existing clients, and performed various assessments generating over $300k revenue for the firm to date.
- Liaison with DFIR, CTI, and GRC team to ensure technical accuracies on TTPs based on MITRE.
- Manage and develop existing client relationships within both US and Canadian market
- Assist client with scoping, SOW, Proposals, RFPs, etc.
- Consult clients in regards to their needs between VA, Penetration Testing, and Red-team Ops.
- Lead and mentor junior penetration testers and oversee 4+ security testing engagements on a monthly basis, and perform quality assurance and ensure technical accuracy in various reports
- Continuously engage and participate in industry related conferences and events and conduct business development related activities
- Translate and communicate observations to clients and executives
- Business development and assist in end-to-end engagement process
- Continuously support the offensive security practice with its growth and development, as well as expanding its service offerings within the Canadian mid-market 
- Providing areas of improvement to clients
- Develop mitigation strategies and recommendation
- Risk consulting

Supervisor, Cyber testing (offensive security)

KPMG Canada

As a Senior consultant at KPMG, my focus lies on, but is not limited to only offensive security. In addition to leading penetration testing, vulnerability management, and red-teaming exercises, bringing in over $500k of revenue per-annum. I perform additional functions across different Cyber Security domains such as:

- Develop a learning plan and help train a team of consultants in various Cyber Security domain.
- Continue to groom and maintain relationships with KPMG clients
- Lead various engagements relating to Cyber Maturity Assessment based on NIST and ISO27001 standards.
- Perform overarching architecture review on organization's network at an Enterprise level.
- Perform vulnerability assessments, segmentation testing, and PCI/DSS based security testing.
- Assist in Incident Response engagement.
- Point of contact between clients and KPMG, document findings into client-facing reports, and presenting identified observations.
- Continuously develop, build, and grow the offensive security practice within KPMG Canada.
- Conduct security research on various topics.
-  Responsible for offensive security lab hosted on a cloud environment and other internal activities such as CI/CD integration, automation, and server configuration and Implementation (AWS, Terraform, and Chef).
- Responsible for handling the management and procurement of various vendor licenses & tools used by KPMG Canada nation-wide

Senior Cyber Security Consultant

Perform penetration testing, vulnerability management, and red-teaming exercises, in addition - I perform additional functions across different Cyber Security domains such as:

- Perform various engagements relating to Cyber Maturity Assessment based on NIST and ISO27001 standards.
- Perform overarching architecture review on organization's network at an Enterprise level.
- Perform vulnerability assessments, segmentation testing, and PCI/DSS based security testing.
- Assist in Incident Response engagement.
- Point of contact between clients and KPMG, document findings into client-facing reports, and presenting identified observations.
- Continuously develop and build the offensive security practice within KPMG Canada.
- Conduct security research on various topics.
-  Responsible for offensive security lab hosted on a cloud environment and other internal activities such as CI/CD integration, automation, and server configuration and Implementation (AWS, Terraform, and Chef).
- Responsible for handling the management and procurement of various vendor licenses & tools used by KPMG Canada nation-wide

Cyber Security Consultant

Mentor - Women in Tech

Packetlabs Ltd.

- Vulnerability Assessments
- Penetration Testing
- Web & Mobile Application Security Testing
- Phone and E-mail based Phishing
- Social Engineering
- Source-code reviews
- Document findings into client-facing reports
____________________________________________________________________________________________________

- Preparing agendas
- Presenting technical findings
- Note taking / Meeting minutes
- Managing and retesting outstanding issues with clients
- Provide feedback and guidance when required
- Deliver quality work to achieve client deliverable timelines
____________________________________________________________________________________________________

Information Security Analyst

Smilegate West

- Asset management: Keep tracks and records of different equipment of the office
- Monitor users' system usage through Observium dashboard.
- Create and update documentation on system manuals and troubleshooting
- Set up users' equipment and computer system (OS and applications)
- Configure endpoint firewall policies
- Troubleshoot system, network, and equipment error
- Work closely with Security Engineer and assist with related tasks
- Responsible and care for assets, cabling, and server rooms.
- Work closely with System Operation Engineers and assist with related tasks
- Work closely with Network Engineers in regards to bandwidth and internet usage report
- Work closely with HR department to determine the best system to use for the office

IT Technician

- Assist students in conducting their lab experimentation - Windows and Linux OSs.
- Ensure proper use of lab equipment
- Monitor users' activities
- Maintain a well working lab environment.
- Advise students and help troubleshoot issues in their system (Windows/Linux)

Information Security (IFS) Lab Advisor

- Assist professors in checking students' assignment in lab environment
- Assist students and answer questions or concerns they may have about OS configurations
- Assist students in debugging their scripts (Python/bash)
- Make sure equipments are properly used in classrooms
- Advise students in different types of hardware that are better suited their needs in the course

Teacher Assistant

Open source CVE collector and vulnerability researcher, offensive security manager, StackOverflow-esque offensive security tool developer, organization helper, offensive security practice builder, technical communicator,  Find me on Medium: https://popalltheshells.medium.com/

Taplio

Ignatius M.'s Linkedin Analytics

What is Ignatius talking about?

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Ignatius M.'s Linkedin Analytics

What is Ignatius talking about?

Want to drive more opportunities from LinkedIn?

Ignatius M.'s Linkedin Analytics