Skip to Main Content

Costa Petros

Senior Security Consultant

EXPERIENCE
Costa Petros began his IT career by covering many facets from the ground up. While in college studying construction management, Costa’s ability to communicate, problem-solve, and collaborate awarded him his first job in IT as a dial-up Internet technical support representative.

As his career progressed, he worked his way up through technical and operational support, PC and IT infrastructure administration, compliance, and consulting roles. Costa held a position as an IT administrator at a branch of a publicly traded company that focused on reselling both Cisco and security services. Costa’s communication skills, technical aptitude, and ‘security-first’ approach opened the door to becoming a penetration tester consultant. As a penetration tester at TrustedSec, Costa specializes in social engineering and physical security assessments. He approaches his work with a ‘hope for the best, prepare for the worst’ mentality.

EDUCATION & CERTIFICATIONS

  • GIAC Penetration Tester (GPEN)
  • Microsoft Certified Professional (MCP)
  • VMware VCA-DCV

PROFESSIONAL AFFILIATIONS

  • InfraGard Northern Ohio Chapter

INDUSTRY CONTRIBUTIONS

  • DerbyCon staff and security, 2017-19

PASSION FOR SECURITY
Costa’s passion for security was evoked at a young age. Growing up in the family takeout business, Costa was taught to protect what you have. This meant locking up at all hours of the day at the family business and at home. As a kid, running in and out of the house was frustrating when he found the doors locked. It didn’t take long for him to find other ways into the house, sometimes climbing onto the roof to bypass a window lock. A curious boy, Costa constantly took apart household items in order to fix, understand, and improve them. This curiosity, his ‘prepare for the worst’ mentality, and ‘protect what you have’ focus drive him to understand and further advance secure implementations.

Featured Blogs And Resources

Discover the blogs, analysis, webinars, and podcasts by this team member.

Blog April 19 2018

It Was the "Summerof2018" - Password Auditing for Windows Administrators

You can audit your Windows domain to identify weak passwords, such as Summer2018 or , and mitigate password spraying by extracting and cracking NTLM hashes…

Read about this article
Events Cincinnati, OH | November 13 2026

Queen City Conference

TrustedSec is proud to sponsor and have a booth at this year's Queen City Conference!

Read about this article
Events Columbus, OH | November 04 2026

BSides Columbus 2026

Enroll in our pre-conference training and don't miss the keynote by Founder & CEO David Kennedy at BSides Columbus!

Read about this article
Events Provo, Utah | October 27 2026

SAINTCON 2026

We're showing up as a proud sponsor at this year's SAINTCON, come find us at our booth!

Read about this article
Webinars October 21 2026

Navigating the Initial AI Best-Practice Framework Offerings

Discover the current landscape of AI best-practice frameworks, what each major framework offers, where it works well, where it falls short, and how to decide…

Read about this article
Blog October 15 2026

Two Config Files, Two Release Tracks, and One Very Bad Commit

Some of the best infrastructure improvements start with one bad afternoon. In the final part of this blog series, we walk through the configuration, release…

Read about this article
Blog October 13 2026

TrustedSec Joins the OpenAI Daybreak Defense Network

We're part of OpenAI’s Daybreak Defense Network—what does that mean for our customers? Go deeper, get to the evidence faster, and make real security…

Read about this article
Podcasts October 12 2026

Security Noise - Tabletops: Roll for Initiative

On this episode, we chat about what goes into developing and moderating Tabletop Exercises (TTX) and the role of being an "InfoSec Dungeon Master" on a TTX,…

Read about this article
Events Orlando, FL | October 12 2026

InfoSec World 2026

TrustedSec is proud to sponsor and have a booth at this year's InfoSec World!

Read about this article
Training Resources October 11 2026

InfoSec World 2-Day Workshop - Supply-Chain to Runtime: Attacking & Defending the Modern DevOps Stack

In this workshop, participants will learn to navigate DevOps attack paths—from code triage to pipeline exploitation—and write detective alerts to defend their…

Read about this article

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.