EXPERIENCE
With over a decade of industry experience, Hans Lakhan has worked in both offensive and defensive roles. Before switching to red teaming, he spent 5 years working as a technical Security Analyst for a Fortune 500 telecommunications company, specializing in networking, firewalls, vulnerability management, and VPNs.
EDUCATION & CERTIFICATIONS
- B.S. Bio-Medical Information Systems, University of Minnesota
- Offensive Security Certified Professional (OSCP)
PROFESSIONAL AFFILIATIONS
Hans occasionally presents at various conferences (Blackhat, DerbyCon) and contributes to several open source projects.
PASSION FOR SECURITY
While Hans enjoys tackling complex security challenges, his true passion stems from tearing apart systems (physical, digital, process flows, and more), in which the goal is to identify weaknesses and present remediation solutions.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Injecting Rogue DNS Records Using DHCP
Understanding DHCP to Inject Rogue DNS Records via Spoofed MAC Addresses.
Azure Account Hijacking using mimikatz’s lsadump::setntlm
Senior security researcher Carlos Perez reveals a hybrid Office 365 attack method using Mimikatz to gain domain admin access and hijack user accounts,…
Password Recovery 101: Cracking More of Your List
Join VP of Consulting Services Martin Bos, Paul Burkeland, and Hans Lakhan for a webinar on password recovery tools and techniques, and gain an analytical…
InfoSec World 2026
TrustedSec is proud to sponsor and have a booth at this year's InfoSec World!
Wild West Hackin' Fest 2026
We're thrilled to sponsor this year's Wild West Hackin' Fest and we'd love to see you at our booth!
GrrCON 2026
TrustedSec is proud to sponsor and have a booth at this year's GrrCON!
AMA: CMMC Phase II Suspension and Beyond
Join Director of Advisory Services Chris Camejo and Compliance Practice Lead Lee Quinton for an expert breakdown of the recent CMMC changes and how to prepare…
AI Offense is Not Noclip Mode
AI doesn't let attackers walk through walls, but it makes finding the cracks more efficient. In this blog, we cut through the hype and explain what AI-driven…
A Vault With No Treasure - CMMC Level 2 Compliance for Subcontractors With No CUI
This blog post should not exist, but it does. In this blog, we detail the improper CMMC Level 2 flow-down problem and the most cost-effective path to…
NewsNation - Cyberattack knocks out California city’s 911 operations
A cyberattack recently forced Suisun City, CA to declare a state of emergency after its 911 dispatch systems were compromised. Advisory Solutions Director Alex…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
