EXPERIENCE
Aaron James is a Senior Security Consultant who began his career in the Information Security field in 2014. Before joining TrustedSec in 2019, Aaron oversaw vulnerability management and security metrics programs in university and medical center environments, followed by several years of penetration testing in a consultant role. Aaron brings to these roles the leadership, communication, and adaptability skills he developed over five combat rotations as an infantryman with the U.S. Army’s 75th Ranger Regiment.
EDUCATION & CERTIFICATIONS
- Bachelor of Science, Computing Security, Rochester Institute of Technology
- Offensive Security Certified Professional (OSCP)
PASSION FOR SECURITY
Aaron’s passion for security developed from a love of practical and technical disciplines, the pleasure of leveraging skill and experience to overcome challenges, and a desire to protect the vulnerable from harm.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Intro to Web App Security Testing: Burp Suite Tips & Tricks
Burp Suite Pro tips from the TrustedSec Software Security team, improving testing workflow with features like proxy, repeater, and intruder modifications.
Intro to Web App Security Testing: Logging
Detailed logging of penetration testing activities is crucial for accuracy and precision, allowing demonstration of actions and times throughout the…
Dungeons and Daemons
Play Roll for Initiative. Hack the Planet.Dungeons & Daemons is a cybersecurity RPG that drops you into the boots of a Red Team operator on a live…
You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections
Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…
Benchmarking Self-Hosted LLMs for Offensive Security
We put LLMs to the test—let's find out how good AI is at hacking! We walk through six simple challenges with intentionally naïve setups to test how capable…
TrustedSec Livestream - AMA: Detection Engineering in 2026 and Beyond with John Dwyer
Come prepared with your questions and walk away with actionable knowledge to sharpen your detection capabilities.
IAM the Captain Now – Hijacking Azure Identity Access
I decided to spend some research time diving in depth into Identity and Access Management (IAM) within Microsoft Azure. I am going to show you within this blog…
Building a Detection Foundation: Part 5 - Correlation in Practice
From Data Sources to DetectionWe've covered a lot of ground in this series: Windows Security events for logon tracking and process execution; PowerShell…
Security Noise - A Goblin, a Ghost, and a Ninja Walk into the Azure Bar
On this episode, Geoff and Skyler are joined by NyxGeek to discuss his suite of Azure bypass techniques. Since these techniques leave no trace, what does it…
Reduce Repetition and Free up Time With Mobile File Extractor
If you do the same thing three times, automate it. Introducing Mobile Data Extractor, a Python tool that handles the repetitive work of mobile app data…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
