Chesleah Kribs
Penetration Tester
Orlando,FL
Summary
Analytical and Dynamic Penetration Tester with over 3 years of hands-on experience in various domains such as security testing and penetration testing. Strong knowledge of network architectures, operating systems and cybersecurity tools. Confident and communicative professional proficient in scripting paired with familiarity of Unix and Windows. Collaborative team player committed to working with businesses and organizations to identify and resolve security vulnerabilities and weaknesses affecting digital assets and computer networks.
Overview
3
3
years of professional experience
5
5
years of post-secondary education
Work History
Penetration Tester
Software Engineering Institute
Pittsburgh, PA
01.2020 - Current
- Develop and evaluate novel security testing capabilities and methodologies, such as revamping MITRE ATT&CK and DEFEND and Cybersecurity Maturity Model Certification (CMMC)
- Conduct revolutionary red team and adversary emulation testing with state-of-the-art technology alongside AI defenses (AIDE) to evaluate efficacy
- Perform thorough testing and code reviews of applications developed in-house to detect potential vulnerabilities and bugs prior to release to customers
- Collaborated with external vendors to perform over 50 penetration tests on network devices, operating systems and databases.
- Recommended IT security improvements to achieve system confidentiality, integrity and availability.
- Assessed threats, risks and vulnerabilities from emerging security issues to advise pertinent stakeholders on appropriate measures.
- Developed risk assessment reports to identify threats and vulnerabilities.
Graduate Intern
The Aerospace Corporation
Greenbelt, MD
05.2019 - 08.2019
- Incorporated and developed working lab environment poised for penetration testing and vulnerability assessment
- Designed cyber threat models of internal department assets for integration with Red Seal software and interpret data received from Tenable Security Center for threat mitigation and vulnerability assessments
- Constructed virtual network to develop tool to identify active unauthorized attacks using signature-based detection of automated Windows exploits such as Kerberoasting, Pass the Hash, and Golden Ticket attacks
- Implemented cloud infrastructure company-wide for defense teams to conduct threat modeling and threat hunting activities using CI/CD alongside Kubernetes, Jenkins, Ansible and Terraform.
- Provided comprehensive research assistance and support when designing and executing experiments.
- Encrypted data and erected firewalls to protect confidential information.
- Applied leading theories and concepts to development, maintenance, and implementation of information security standards, procedures, and guidelines.
- Developed, implemented, and documented security programs and policies and monitored compliance across departments.
Information Security Intern
NASA Ames Research Center
Mountain View, CA
07.2018 - 05.2019
- Designed and developed key escrow solutions for maintaining security over controlled devices to ensure protection of assets and detection of vulnerabilities
- Updated and refined phishing training and expanded implementation for education on data protection for individual, organizational, and agency use
- Coordinated various IDS/IPS solutions for agency-wide use to secure private and public networks
- Accountable for transferring all center-wide webpages and web services to HTTPS based on M-05-04 and NIST (https://https.cio.gov)
- Authored security related articles for distribution within ARC and throughout NASA centers.
- Recommend improvements in security systems and procedures
- Conducted security audits to identify vulnerabilities
- Developed plans to safeguard computer files against modification, destruction or disclosure
Education
Master of Science - Computer Science, Cyber Security
Florida State University
Tallahassee, FL 08.2017 - 12.2019
Bachelor of Science - Computer Criminology-Political Science
Florida State University
Tallahassee, FL 01.2015 - 05.2017
Skills
Written and Verbal Communication
Analytical and Critical Thinking
BurpSuite Professional
Vulnerability Scanning Tools
Active and Passive Reconnaissance
Social Engineering
Penetration testing
Problem-Solving
Teamwork and Collaboration
Flexible and Adaptable
Attention to Detail
Work Availability
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse
Quote
I cannot believe the purpose of life is to be happy. I think the purpose of life is to be useful, to be responsible, to be compassionate. It is, above all, to matter, to count, to stand for something, to have made some difference that you lived at all.
Leo Rosten
Timeline
Penetration Tester
Software Engineering Institute
01.2020 - Current
Graduate Intern
The Aerospace Corporation
05.2019 - 08.2019
Information Security Intern
NASA Ames Research Center
07.2018 - 05.2019
Master of Science - Computer Science, Cyber Security
Florida State University
08.2017 - 12.2019
Bachelor of Science - Computer Criminology-Political Science
Florida State University
01.2015 - 05.2017