Skip to Main Content

Costa Petros

Senior Security Consultant

EXPERIENCE
Costa Petros began his IT career by covering many facets from the ground up. While in college studying construction management, Costa’s ability to communicate, problem-solve, and collaborate awarded him his first job in IT as a dial-up Internet technical support representative.

As his career progressed, he worked his way up through technical and operational support, PC and IT infrastructure administration, compliance, and consulting roles. Costa held a position as an IT administrator at a branch of a publicly traded company that focused on reselling both Cisco and security services. Costa’s communication skills, technical aptitude, and ‘security-first’ approach opened the door to becoming a penetration tester consultant. As a penetration tester at TrustedSec, Costa specializes in social engineering and physical security assessments. He approaches his work with a ‘hope for the best, prepare for the worst’ mentality.

EDUCATION & CERTIFICATIONS

  • GIAC Penetration Tester (GPEN)
  • Microsoft Certified Professional (MCP)
  • VMware VCA-DCV

PROFESSIONAL AFFILIATIONS

  • InfraGard Northern Ohio Chapter

INDUSTRY CONTRIBUTIONS

  • DerbyCon staff and security, 2017-19

PASSION FOR SECURITY
Costa’s passion for security was evoked at a young age. Growing up in the family takeout business, Costa was taught to protect what you have. This meant locking up at all hours of the day at the family business and at home. As a kid, running in and out of the house was frustrating when he found the doors locked. It didn’t take long for him to find other ways into the house, sometimes climbing onto the roof to bypass a window lock. A curious boy, Costa constantly took apart household items in order to fix, understand, and improve them. This curiosity, his ‘prepare for the worst’ mentality, and ‘protect what you have’ focus drive him to understand and further advance secure implementations.

Featured Blogs And Resources

Discover the blogs, analysis, webinars, and podcasts by this team member.

Blog April 19 2018

It Was the "Summerof2018" - Password Auditing for Windows Administrators

You can audit your Windows domain to identify weak passwords, such as Summer2018 or , and mitigate password spraying by extracting and cracking NTLM hashes…

Read about this article
Events Orlando, FL | October 12 2026

InfoSec World 2026

TrustedSec is proud to sponsor and have a booth at this year's InfoSec World!

Read about this article
Events Deadwood, SD | October 07 2026

Wild West Hackin' Fest 2026

We're thrilled to sponsor this year's Wild West Hackin' Fest and we'd love to see you at our booth!

Read about this article
Events Grand Rapids, MI | September 24 2026

GrrCON 2026

TrustedSec is proud to sponsor and have a booth at this year's GrrCON!

Read about this article
Webinars September 09 2026

Risk at the Edge: Managing Cyber Exposure Across IT & OT Assets

Join Senior Security Consultant Steph Saunders for a practical look at how to close gaps and build cyber resilience across converged IT/OT environments.

Read about this article
News September 04 2026

NewsNation - Millions of IDs Potentially Exposed

IDScan, used by rental car agencies and online verification systems across the country, is at the center of a reported data breach involving over 153 million…

Read about this article
News September 03 2026

CNBC - What's Behind Today's AI Outage?

Multiple AI platforms went down this week as a wave of new frontier models hit the market simultaneously, and China's distillation of US AI models is adding to…

Read about this article
Blog September 03 2026

LLMHaxor Update

Today I am sharing some updates on a tool I created from an earlier time — before Burp Suite included native AI testing enhancements and before an almost…

Read about this article
Blog September 01 2026

waf-fu, or Some Log Replay Nonsense

AWS WAF logs are keeping receipts, including your session tokens. In this blog, we walk through the risk of default WAF logging configurations and the tool…

Read about this article
Podcasts August 31 2026

Security Noise - Hacker Summer Camp 2026

We're back from Hacker Summer Camp and are ready to get "Reel" about our experiences in Las Vegas! Join us on this episode of Security Noise as we sit down to…

Read about this article

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.