Charley B.

About Charley B.

Experienced Penetration Tester specializing in identifying vulnerabilities in web applications, mobile applications, APIs, AWS environments, and Android devices. Skilled in assessing security risks, developing robust testing strategies, and delivering actionable recommendations to enhance organizational security posture.

Experience

1. Senior Cybersecurity Penetration Tester

   Aventiv Technologies

   Jul 2021 — Present

   Web Application Security:*Conducted comprehensive penetration tests on web applications, uncovering critical vulnerabilities and collaborating with development teams to mitigate risks.*Performed comprehensive penetration testing of APIs, identifying vulnerabilities such as insecure authentication, excessive data exposure, and improper input validation.*Leveraged advanced tools and manual techniques to identify OWASP Top Ten vulnerabilities and secure sensitive data and APIs.*Provided detailed reports and remediation plans to stakeholders, improving application security across the development lifecycle.Mobile Application Security:*Performed in-depth security assessments of Android mobile applications, uncovering vulnerabilities in APKs, API integrations, and data storage practices.*Developed and executed strategies to secure Android hardware for use in highly regulated environments.*Evaluated mobile app APIs for authentication flaws, improper permissions, and data leakage, ensuring compliance with security standards.AWS Security:*Conducted thorough security assessments of AWS environments, focusing on identifying misconfigurations, privilege escalations, and overly permissive IAM roles.*Performed security reviews of AWS Lambda functions and API Gateway setups to ensure secure execution of serverless applications.*Evaluated S3 bucket configurations for unrestricted public access, weak permissions, and potential data exfiltration risks.*Collaborated with cloud engineers to design and implement secure architectures, incorporating multi-factor authentication, encryption, and least-privilege principles.

Education

• Western Governors University

  MS Information Security and Assurance, Informaiton Security

  2013 — 2016

• DeVry University

  Bachelor of Science (BS), Network Communication and Management

  2006 — 2013