EXPERIENCE
With over a decade of industry experience, Hans Lakhan has worked in both offensive and defensive roles. Before switching to red teaming, he spent 5 years working as a technical Security Analyst for a Fortune 500 telecommunications company, specializing in networking, firewalls, vulnerability management, and VPNs.
EDUCATION & CERTIFICATIONS
- B.S. Bio-Medical Information Systems, University of Minnesota
- Offensive Security Certified Professional (OSCP)
PROFESSIONAL AFFILIATIONS
Hans occasionally presents at various conferences (Blackhat, DerbyCon) and contributes to several open source projects.
PASSION FOR SECURITY
While Hans enjoys tackling complex security challenges, his true passion stems from tearing apart systems (physical, digital, process flows, and more), in which the goal is to identify weaknesses and present remediation solutions.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Injecting Rogue DNS Records Using DHCP
Understanding DHCP to Inject Rogue DNS Records via Spoofed MAC Addresses.
Azure Account Hijacking using mimikatz’s lsadump::setntlm
Senior security researcher Carlos Perez reveals a hybrid Office 365 attack method using Mimikatz to gain domain admin access and hijack user accounts,…
Password Recovery 101: Cracking More of Your List
Join VP of Consulting Services Martin Bos, Paul Burkeland, and Hans Lakhan for a webinar on password recovery tools and techniques, and gain an analytical…
Queen City Conference
TrustedSec is proud to sponsor and have a booth at this year's Queen City Conference!
BSides Columbus 2026
Enroll in our pre-conference training and don't miss the keynote by Founder & CEO David Kennedy at BSides Columbus!
SAINTCON 2026
We're showing up as a proud sponsor at this year's SAINTCON, come find us at our booth!
Navigating the Initial AI Best-Practice Framework Offerings
Discover the current landscape of AI best-practice frameworks, what each major framework offers, where it works well, where it falls short, and how to decide…
Two Config Files, Two Release Tracks, and One Very Bad Commit
Some of the best infrastructure improvements start with one bad afternoon. In the final part of this blog series, we walk through the configuration, release…
TrustedSec Joins the OpenAI Daybreak Defense Network
We're part of OpenAI’s Daybreak Defense Network—what does that mean for our customers? Go deeper, get to the evidence faster, and make real security…
Security Noise - Tabletops: Roll for Initiative
On this episode, we chat about what goes into developing and moderating Tabletop Exercises (TTX) and the role of being an "InfoSec Dungeon Master" on a TTX,…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
