DeepCove Cybersecurity

As a Senior Manager at DCC, I oversee the offensive security (proactive testing) services. The team over at DCC leverages AI / LLMs for our operations. Other than that, my responsibilities include:

- Conduct research on AI/LLM integrations to improve the traditional penetration test methodology.
- Lead and manage different assessments and testing projects (web, API, mobile, desktop, internal/external infrastructure, wireless, etc.).
- Developing methodology and learning plan with a focus of training other testers.
- Develop penetration testing infrastructure, processes, and policies (SOPs).
- Carefully asses products and vendors before coming into partnership agreements or purchase, leading to multiple CVE submissions 
- Liaison with and perform third-party vendor risk analysis, and testing. 
- Manage vulnerability triaging processes for 10+ applications on a continuous basis.
- Help develop and integrate next-gen security products.
- Conduct regular security assessments and communicate findings and recommendations to stakeholders.
- Participate in “huddles” and provide attackers’ perspectives in incidents.
- Involved in purple-team style assessments to help detect and response capabilities.

Sr. Manager, Proactive security

OWASP® Foundation

OWASP Toronto Co-lead

Medium

I write about bugs and vulnerabilities I discovered in bug bounty programs. It may also contain casual thoughts on InfoSec-related and non-related matters. https://popalltheshells.medium.com/

Author

Seneca College

Giving back to the InfoSec community which has been good to me by teaching a course in Cyber Security and Threat Management, specifically Ethical hacking and Vulnerability testing.

This course introduces students to what and who ethical hackers are, how they are different from non-ethical hackers, and why/how they are essential for protecting data from cyber-attacks. Students will look closely at the different types of tests that can be conducted by ethical hackers to assess the readiness of an organizations system to withstand cyber-attacks. The course also investigates the methods and tools used in cyber-attacks and their countermeasures, as well as available security resources that every organization needs to possess to be able to counter the different cyber-attack "types".  This will equip the students with the knowledge and techniques to successfully consider the different methods of combating hackers and cyber-attacks.

Professor

RSM Canada

As a supervisor within the offensive security team, my main responsibilities are not limited to performing penetration testing and red-teaming activities. Some of my duties include:

- Perform testing and understand clients’ requirements based on different standards: PCI-DSS, NIST, ISO27K, HIPPA
- Part of pursuit team that brings in over $100k revenue to date
- Lead and worked with existing clients, and performed various assessments generating over $300k revenue for the firm to date.
- Liaison with DFIR, CTI, and GRC team to ensure technical accuracies on TTPs based on MITRE.
- Manage and develop existing client relationships within both US and Canadian market
- Assist client with scoping, SOW, Proposals, RFPs, etc.
- Consult clients in regards to their needs between VA, Penetration Testing, and Red-team Ops.
- Lead and mentor junior penetration testers and oversee 4+ security testing engagements on a monthly basis, and perform quality assurance and ensure technical accuracy in various reports
- Continuously engage and participate in industry related conferences and events and conduct business development related activities
- Translate and communicate observations to clients and executives
- Business development and assist in end-to-end engagement process
- Continuously support the offensive security practice with its growth and development, as well as expanding its service offerings within the Canadian mid-market 
- Providing areas of improvement to clients
- Develop mitigation strategies and recommendation
- Risk consulting

Supervisor, Cyber testing (offensive security)

KPMG Canada

As a Senior consultant at KPMG, my focus lies on, but is not limited to only offensive security. In addition to leading penetration testing, vulnerability management, and red-teaming exercises, bringing in over $500k of revenue per-annum. I perform additional functions across different Cyber Security domains such as:

- Develop a learning plan and help train a team of consultants in various Cyber Security domain.
- Continue to groom and maintain relationships with KPMG clients
- Lead various engagements relating to Cyber Maturity Assessment based on NIST and ISO27001 standards.
- Perform overarching architecture review on organization's network at an Enterprise level.
- Perform vulnerability assessments, segmentation testing, and PCI/DSS based security testing.
- Assist in Incident Response engagement.
- Point of contact between clients and KPMG, document findings into client-facing reports, and presenting identified observations.
- Continuously develop, build, and grow the offensive security practice within KPMG Canada.
- Conduct security research on various topics.
-  Responsible for offensive security lab hosted on a cloud environment and other internal activities such as CI/CD integration, automation, and server configuration and Implementation (AWS, Terraform, and Chef).
- Responsible for handling the management and procurement of various vendor licenses & tools used by KPMG Canada nation-wide

Senior Cyber Security Consultant

Perform penetration testing, vulnerability management, and red-teaming exercises, in addition - I perform additional functions across different Cyber Security domains such as:

- Perform various engagements relating to Cyber Maturity Assessment based on NIST and ISO27001 standards.
- Perform overarching architecture review on organization's network at an Enterprise level.
- Perform vulnerability assessments, segmentation testing, and PCI/DSS based security testing.
- Assist in Incident Response engagement.
- Point of contact between clients and KPMG, document findings into client-facing reports, and presenting identified observations.
- Continuously develop and build the offensive security practice within KPMG Canada.
- Conduct security research on various topics.
-  Responsible for offensive security lab hosted on a cloud environment and other internal activities such as CI/CD integration, automation, and server configuration and Implementation (AWS, Terraform, and Chef).
- Responsible for handling the management and procurement of various vendor licenses & tools used by KPMG Canada nation-wide

Cyber Security Consultant

Mentor - Women in Tech

Packetlabs Ltd.

- Vulnerability Assessments
- Penetration Testing
- Web & Mobile Application Security Testing
- Phone and E-mail based Phishing
- Social Engineering
- Source-code reviews
- Document findings into client-facing reports
____________________________________________________________________________________________________

- Preparing agendas
- Presenting technical findings
- Note taking / Meeting minutes
- Managing and retesting outstanding issues with clients
- Provide feedback and guidance when required
- Deliver quality work to achieve client deliverable timelines
____________________________________________________________________________________________________

Information Security Analyst

Smilegate West

- Asset management: Keep tracks and records of different equipment of the office
- Monitor users' system usage through Observium dashboard.
- Create and update documentation on system manuals and troubleshooting
- Set up users' equipment and computer system (OS and applications)
- Configure endpoint firewall policies
- Troubleshoot system, network, and equipment error
- Work closely with Security Engineer and assist with related tasks
- Responsible and care for assets, cabling, and server rooms.
- Work closely with System Operation Engineers and assist with related tasks
- Work closely with Network Engineers in regards to bandwidth and internet usage report
- Work closely with HR department to determine the best system to use for the office

IT Technician

- Assist students in conducting their lab experimentation - Windows and Linux OSs.
- Ensure proper use of lab equipment
- Monitor users' activities
- Maintain a well working lab environment.
- Advise students and help troubleshoot issues in their system (Windows/Linux)

Information Security (IFS) Lab Advisor

- Assist professors in checking students' assignment in lab environment
- Assist students and answer questions or concerns they may have about OS configurations
- Assist students in debugging their scripts (Python/bash)
- Make sure equipments are properly used in classrooms
- Advise students in different types of hardware that are better suited their needs in the course

Teacher Assistant

CVE collector and vulnerability researcher, organization helper, offensive security practice builder, technical communicator,  Find me on Medium: https://popalltheshells.medium.com/


Taplio

Ignatius Michael's Linkedin Analytics

Ignatius Michael

What is Ignatius talking about?

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Ignatius Michael's Linkedin Analytics

Ignatius Michael

What is Ignatius talking about?

Want to drive more opportunities from LinkedIn?

Ignatius Michael's Linkedin Analytics