EXPERIENCE
Aaron James is a Senior Security Consultant who began his career in the Information Security field in 2014. Before joining TrustedSec in 2019, Aaron oversaw vulnerability management and security metrics programs in university and medical center environments, followed by several years of penetration testing in a consultant role. Aaron brings to these roles the leadership, communication, and adaptability skills he developed over five combat rotations as an infantryman with the U.S. Army’s 75th Ranger Regiment.
EDUCATION & CERTIFICATIONS
- Bachelor of Science, Computing Security, Rochester Institute of Technology
- Offensive Security Certified Professional (OSCP)
PASSION FOR SECURITY
Aaron’s passion for security developed from a love of practical and technical disciplines, the pleasure of leveraging skill and experience to overcome challenges, and a desire to protect the vulnerable from harm.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Intro to Web App Security Testing: Burp Suite Tips & Tricks
A brief list of useful things we wish we had known sooner Burp Suite Pro can be complicated and intimidating. Even after learning and becoming comfortable with…
Intro to Web App Security Testing: Logging
A Brief Look at Approaches to Logging and Pitfalls to Avoid TL;DR The Logger++ extension is a great tool for recording requests and responses across all of…
2024 Conference Roundup
Join our panelists David Kennedy, Justin Elze, Jason Lang, and Oddvar Moe for their firsthand accounts and perspectives on what people were talking about at…
Operating Inside the Interpreted: Offensive Python
IntroductionEvery once in a while, I get the urge to go back and revisit older techniques that used to be popular but have fallen out of favor with the…
TrustedSec Tech Brief - January 2025
Carlos Perez walks us through several major vulnerabilities and patches from early January 2025, including a critical Fortinet FortiGate zero-day vulnerability.
Security Noise - Episode 7.9
On this episode of the Security Noise Podcast, we discuss user enumeration on Azure and "presence data" in Microsoft Teams with nyxgeek.
DOD Contract Compliance: DFARS 7012 and CMMC
Advisory Compliance Practice Lead Chris Camejo will take a deep dive into the Department of Defense requirements for protecting FCI and CUI.
Command Line Underdog: WMIC in Action
My typical engagements are mostly Red Teams, so I do not often get a chance to play with terminal server application breakouts—but on a recent engagement, I…
Solving NIST Password Complexities: Guidance From a GRC Perspective
Not another password change! Isn’t one (1) extra-long password enough? As a former Incident Response, Identity and Access Control, and Education and Awareness…
Security Noise - Episode 7.8
Farewell 2024
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
