Ken Nevers, Principal Offensive Cybersecurity Consultant - OSEP, OSCP, CRTE, CRTO, C3P0, R2D2
With over a decade of experience in offensive security, I specialize in identifying, exploiting, and remediating vulnerabilities across complex enterprise environments. As the former CSO and Offensive Security Lead at Red Seer Security, I led red team operations, coordinated security engagements, co-founded both HackSpaceCon and HackRedCon, and helped Fortune 500 companies turn security challenges into resilience, while giving back to the community through the BuildCyber.app platform and free training and certification program for under-served communities. 🎯 Core Expertise: Internal Penetration Testing and Active Directory Environments Web Application Security (OWASP Top 10, API abuse, SSRF, XSS, SQLi resulting in Hall of Fames with Organizational Vulnerability Disclosure Programs/Bug Bounties) Infrastructure & Cloud Penetration Testing (AWS, Azure, hybrid) Social Engineering & OSINT Reconnaissance Threat Emulation & Using the MITRE ATT&CK, PTES and in-house custom frameworks. Custom Exploit Development & Payload Crafting CTFs, Breach Simulation, Incident Response Support 🧠Career Highlights: Successfully led simulated APT-style red team operations against major financial and healthcare organizations. Presented and participated at conferences like DefCon's Red Team Village sessions, DerbyCon and local industry groups. Authored in-house tools for payload obfuscation, privilege escalation, password cracking, reporting and C2 evasion. Mentored junior operators, building red team capabilities from scratch to 50+ contractors and essential workers. Developed custom TTPs used in purple/red team assessments to validate detection efficacy of products and people. ☕ Fueled by coffee, loud music, sarcasm, and shell access. Currently, I am a Principal Offensive Cybersecurity Consultant at Rotas Security where we hack the planet.