Jeremiah Iams

About Jeremiah Iams

I’m an internal penetration tester focused on web application and Active Directory security. I help teams find real risk, explain it clearly, and get it fixed. In my current role, I plan and execute internal network and application assessments end-to-end: scoping, testing, evidence collection, and reporting. Strengths I bring to a team:• Clear reporting that translates technical findings into business risk and practical fixes• Strong AD and Windows security fundamentals (plus Linux comfort)• Web app testing grounded in OWASP methodology• Continuous learning (OSCP, OSEP, CRTO, PNPT, CBBH)

Experience

1. Penetration Tester

   Avantor

   May 2024 — Present

   Internal Penetration Tester supporting enterprise security assessments across infrastructure and applications. Partner with engineering and IT teams to validate controls, identify risk, and drive remediation through clear, actionable reporting.• Conduct internal network and web application penetration tests aligned to NIST/OWASP guidance and company standards• Perform scoping, threat modeling, test execution, evidence collection, and executive-ready reporting• Validate remediation through retesting and collaborate with stakeholders to reduce recurring findings• Build repeatable test plans and lightweight automation to improve coverage and consistency• Contribute to security awareness by translating technical issues into business risk and practical fixes• Maintain detailed documentation, artifacts, and audit-ready notes for compliance and governance needs• Deliver an average of 4-8 assessments per quarter across our domain• Track findings through remediation and retesting, improving closure rate and reducing repeat findings• Produce executive summaries and risk narratives for leadership and audit stakeholders

Education

• Grand Canyon University

  Bachelor of Science - BS