Jake Evans

About Jake Evans

Security professional with 25+ years experience in information security. My primary responsibilities generally fall on the offensive side of security in an effort to identify risks before they can cause significant damage to organizations.Relevant certifications: OSCE, OSCP, GXPN, GCPN, GPEN, GWAPT, GPYC, GMLE, GCIH, GCIA, PACSP, PALPE, CISSP, CISA, CRISC.Primary specialty: security research and white box penetration testing, red teaming, agentic AI offensive engineering, AI penetration testing and red teaming, traditional black or grey box penetration testing/ethical hacking (network, web application, cloud, wireless, physical), and management of offensive security programs and teams.Secondary specialties: intrusion analysis and detection; incident handling; PCI, HIPAA, NIST, FISMA, DISA, CIS, SOX, COBIT, NERC, GDPR other state and international privacy laws and security standards; risk analysis.

Experience

1. Osce Oscp, Saas Cloud Security Senior Manager, Offensive Engineering

   Oracle

   May 2022 — Present · Portland, OR, US

   Hands-on leader of an offensive security team focused primarily on red team activities, security research (white-box testing), deep dive penetration testing, and threat analysis. This team works closely with our own security and engineering teams focused on defending the organization.Built a global red team and advanced security research organization within Oracle SaaS Cloud Security from the ground up. The team is now recognized within Oracle SaaS for its high levels of sophistication and success.

Education

• Boston Cybernetics Institute

  Modern Binary Exploitation

  2021 — 2021

• SEC598: AI and Security Automation for Red, Blue, and Purple Teams

  No certification offered for this course.

• Lewis & Clark College

  Bachelor's of Science, Psychology

  1997 — 2000

• Offensive Security Advanced Web Attacks and Exploitation (Black Hat 2016)

  Advanced Web Attacks and Exploitation

  2016 — 2016

• SANS SEC760: Advanced Exploit Development for Penetration Testers

  No certification offered for this course

  2018

Skills

• Information Security Management
• Ethical Hacking
• IT Governance
• Nerc
• Security Awareness
• Compliance Management
• Information Security
• Penetration Testing
• Log Management
• Computer Forensics
• IT Risk
• Metasploit
• Vulnerability Scanning
• Nist
• Cyber Security
• Iso 27000
• Ids
• Hipaa
• Gcih
• Malware Analysis
• Security Audits
• Compliance
• Security
• Iso 27001
• Backtrack
• Fisma
• Network Security
• IT Audit
• Application Security
• Risk Assessment
• Internet Security
• Risk Mitigation
• System Administration
• Hacking
• Intrusion Detection
• Firewalls
• Web Application Security
• Ips
• Cobit
• Sox