EXPERIENCE
James started his career as a software developer and worked across a range of different industry sectors before moving into an information security role. He has spent the last 8 years in offensive security, with the latter half of that time spent delivering Red Team engagements.
EDUCATION & CERTIFICATIONS
- Masters of Science: Computer Systems (Bangor University)
- Offensive Security Certified Professional (OSCP)
- Certified Red Team Operator (CRTO)
INDUSTRY CONTRIBUTIONS
James has presented at conferences in the United Kingdom (BSides Manchester and Steelcon) and often publishes research on employer blogs and personal blogs.
PASSION FOR SECURITY
James has been fascinated by computers since he first broke the family PC and had to learn how to fix it in a hurry. Now, he enjoys finding new and unusual ways to make computers do things that they weren’t meant to do.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Hunting Deserialization Vulnerabilities With Claude
In this post, we are going to look at how we can find zero-days in .NET assemblies using Model Context Protocol (MCP).SetupBefore we can start vibe hacking, we…
Teaching a New Dog Old Tricks - Phishing With MCP
As AI evolves with MCP, can a new “dog” learn old tricks? In this blog, we test Claude AI’s ability to craft phishing pretexts—and just how much effort it…
Spec-tac-ula Deserialization: Deploying Specula with .NET
This post explains how.NET deserialization can be used to backdoor a workstation with Specula, making it a valuable resource for Red Team operations.
Discovering a Deserialization Vulnerability in LINQPad
Discovering a Deserialization Vulnerability in LINQPad, written by James Williams, reveals a novel deserialization vulnerability in a.NET application with over…
You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections
Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…
ISC2 Cleveland Chapter Member Meeting - March 2026
ISC2 Cleveland Chapter March MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…
Policy as Code: Stop Writing Policies and Start Compiling Them
The Problem Nobody Wants to Talk AboutLet me paint a picture most security leaders will recognize.You have 30+ policies living as Word documents on SharePoint.…
Building a Detection Foundation: Part 4 - Sysmon
Filling the Gaps Native Logging Can'tAt this point in our series, we have Windows Security events capturing logon sessions and process creation, and…
Security Noise - AI is Exploring The Deep Blue CVEs
On this episode of Security Noise, we explore the cutting-edge use of AI in vulnerability research, exploit development, and cybersecurity defense with guests…
ABC7 Chicago - March Madness betting, ticket scams targeting college basketball tournament fans
March Madness is in full swing and so are the scams, the latest being fake tickets sales and "bogus" bracket challenges. Advisory Solutions Director Alex…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
