Zach Copeland

About Zach Copeland

As a Red Teamer and Pentester at a multinational enterprise company with employees across 70+ countries, I manage the global pentest program that directly protects critical business units, customer data, and revenue-generating platforms.I manage and execute complex penetration testing engagements targeting enterprise-scale web applications, APIs, and hybrid infrastructure - supporting millions of users worldwide. Working across time zones and teams, I scope tests, define rules of engagement, and deliver high-impact reports that influence decision-making at the leadership level.My work has identified and remediated vulnerabilities in platforms that support multi-million-dollar contracts and digital products, reducing risk exposure and improving the company’s security posture in regulated markets like education, finance, and publishing.I specialize in demonstrating real-world impact through exploit chaining, lateral movement, and advanced attack paths — translating technical findings into business risk for executive stakeholders. By aligning with industry frameworks like MITRE ATT & CK, I bridge the gap between red team insight and blue team action.In my personal time, I actively invest in developing my skills by competing in CTF events and engaging with the community while attending security conferences. I also contribute to the broader security community through published research and written work, including contributions to well-known publications such as 2600: The Hacker Quarterly.

Experience

1. Penetration Tester

   Pearson

   Apr 2024 — Present · Morrisville, NC, US

   Manage the global penetration testing program for hundreds of applications and teams across multiple countries, owning the end-to-end lifecycle from intake and scoping through execution, reporting, and remediation follow-up.Develop and maintain full-service pentest processes, including scoping alignment conversations and documentation, formal rules of engagement, scheduling, and assigning of assessments to the internal pentest team.Serve as a core member of the internal Red Team, planning and executing quarterly adversary emulation campaigns to test and improve organizational detection, response, and resilience.Contribute to the global phishing simulations, trainings, and awareness program by ideating quarterly campaigns, designing payloads and scenarios, and delivering simulations to employees worldwide to strengthen security culture and reduce phishing risk.

Education

• The University of Akron

  Bachelor of Science (B.S.), Computer Science and Engineering

  2007 — 2011

• Western Governors University

  Master of Science - MS, Cybersecurity and Information Assurance

  2025

• Kent State University

  Bachelor of Arts (B.A.), Criminology, Justice Studies

  2011 — 2013

Skills

• Microsoft Excel
• E-Commerce Consulting
• Translation
• Google Adwords
• Customer Relationship Management (Crm)
• Marketing Strategy