Nathan Drier

About Nathan Drier

Architect, trainer, writer, presenter, shell-slinger – I wear many hats, all focused on crafting world-class offensive security teams and services-I\'m currently in a practice architecture role, responsible for growing and developing one of the best offensive security testing teams on the planet. We deliver a large catalog of services, including Red Team, Purple Team, Penetration Testing, and more. I\'ve done it all here; built a technical hiring pipeline, hired and trained ~100 consultants, and developed tools to help us deliver and scale. I designed and wrote much of our reporting material, sample reports, methodology, findings, and any other client-facing deliverables. I also spent a ton of time with our sales team, writing up sales enablement material, content, doing services videos and podcasts, and delivering countless presentations and briefs to current and potential customers. I\'ve also created / scoped / sold / managed / delivered custom offensive security services for things like hardware reverse engineering, OT security, and AI security. I\'m fluent in Linux, Bash, and anything it takes to land a shell. I\'ve got experience in PCI, FFIEC, and HIPAA tainted testing. I love ridiculous post-exploitation and turning menial, info-level issues into epic spans of compromise. I\'ve spoke at Toorcon, been featured in Wired and NetworkWorld and hold a OSCP certification.I\'ve found a handful of 0-day over the years, here\'s a sample of my CVE\'s:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-20••••19http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-20••••20http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-20••••47http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-20••••48

Experience

1. Senior Managing Principal Consultant

   Sophos

   Mar 2025 — Present

   New company, new logo, same world-class offensive security services.

Education

• Davenport University

  Bachelor's degree, Network Security

• Grand Rapids Community College

  AA, Web Design, General Studies

  2003 — 2006

• Davenport University

  BA, Network Security

  2004 — 2008

Skills

• Network Security
• Computer Security
• Security Research
• Information Security Management
• Nessus
• Security Architecture Design
• Nmap
• Payment Industry
• Vulnerability Assessment
• Ceh
• Wireless Security
• Intrusion Detection
• Metasploit
• Ids
• Vulnerability Management
• Internet Security
• Vulnerability Scanning
• Application Security
• Linux
• Hardening
• Cissp
• Pci Dss
• Windows Security
• Security Awareness
• Penetration Testing
• Security Audits
• Security
• Social Engineering
• Information Security
• Data Security
• Web Application Security
• Ips
• Owasp