Chris Scott

About Chris Scott

Chris has worked with many Fortune 500 companies, National Medical Institutes, Insurance Agencies, and Defense Contractors performing Physical, Social, Penetration Testing, Vulnerability, and PCI Assessments. He serves as a developer and contributor to the Linux Community for Pentoo Linux and open source security tools. Most notably N4P (a comprehensive framework for wireless network intrusion), which is featured in the Pentoo Linux Penetration distribution. Chris has long demonstrated a sound track record for developing ideas on the bleeding edge of security methodologies such as creating the first Instant Messaging proxy platform for the AIM protocol in 2001. These applications were designed as early remote social engineering tools.Additionally, Chris is a noted writer publishing a Security Awareness white paper and was recognized as a finalist (best new security blogger) by the Security Bloggers Council at the 2014 RSA Security conference. Chris has also enjoyed speaking at national security events such as Defcon, Derbycon, 2600, B-Sides and is also a black badge holder. Using this public stage Chris co-founded the DC615 group and launched an offsec security based IRC channel.Prior to his career in InfoSec, Chris spent 11 years at a national level and 8 as a professional competitor in Motocross before retiring as a competitor to focus on his InfoSec career. He still serves as a mentor and trainer in the motocross community.

Experience

1. Security Consultant

   Solutionary

   Oct 2015 — Present

   Penetration testing Network pen, Thick client applications, Cloud infrastructure. Mobile app, API, and Web appOffsec open source devVulnerability AssessmentWireless Network Security Assessments and PentestingSocial Engineering Telephony, onsite and remote pre-texting, spear phishingPhysical Security Assessments Tailgating, lock picking, camera evasion, RFID Cloning, Badge creation.Pentesting on NIST PCI DSS FrameworkScenario-based security testingDevelopment of methodologies and testing frameworksPractices with Red plus Blue teams replaying attacks to develop 0day detection signatures. Identifying adversary movement patterns vs intended environment behavior.Testing remediation and support from previously identified risks

Education

• Gulf Coast State College

  Bachelor of Applied Science (B.A.Sc.), Computer Science

  2002 — 2004

• Rice University

  Online Audit, An Introduction to Interactive Programming in Python

  2012 — 2012

• Regent University

  Internship + studies, Business, Marketing & Design, and Related Support Services

  2004 — 2006

• Strategic Security 7week offensive security courses

  Joe McCray CTF Competitions and Security training courses, offensive hacking, encoding, encryption, building hardened nix systems

  2012 — 2012

• New Horizons

  certs, A+, NET+, CCNA

  2000 — 2002

• W3C Schools

  Certifications, HTML4.1, XHTML1.1, HTML5, CSS, CSS3, JS

  2000 — 2012

• University of Washington

  Online Audit, Security Risk Management, Information Security and Risk Management, Building an Information Risk Management Toolkit, Designing

  2012 — 2014

• Stanford

  Cryptography I, Cryptography II

  2012 — 2014

Skills

• Information Assurance
• Vpn
• Gentoo Linux Hardened
• Information Security
• Ssh
• Network Security
• Virtualization
• Networking
• Disaster Recovery
• Network Administration
• Penetration Testing
• Offensive Security
• Cryptography
• Programming Python/Shell/Vb6
• Consulting
• Security
• Wireless Security
• Pci Dss
• Linux
• Vulnerability Assessment