EXPERIENCE
Lou has obtained several years of experience in information security roles by doing a variety of different tasks on both offense and defense including detection and monitoring, vulnerability management, and internal network and web application penetration testing. He initially spent three and a half years as a software developer before transitioning into an information security role.
EDUCATION & CERTIFICATIONS
- Bachelor of Science: Computer Science, The University of Akron
- GIAC Security Essentials (GSEC)
- Offensive Security Certified Professional (OSCP)
- Offensive Security Wireless Professional (OSWP)
- Offensive Security Certified Expert (OSCE)
- eLearnSecurity Web Application Penetration Tester (eWPT)
- GIAC Assessing and Auditing Wireless Networks (GAWN)
- Certified Red Team Operator (CRTO)
PASSION FOR SECURITY
For as long as Lou can remember, he has been fascinated with computers, and from a young age began tinkering with them and learning how to program. He has always had a drive to understand how things really work and what makes them tick. After learning that one can make a computer do things it wasn’t intended to do, he was hooked. This mindset, along with growing up watching movies like The Matrix and Hackers, fueled his interest in security and an endless pursuit of knowledge and continuous learning.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Ask Me Anything: Pen Testing from a Hacker's Perspective
Join seasoned experts Adam Compton, Lou Scicchitano, and Justin Elze for an interactive discussion on penetration testing, covering real-world insights, best…
You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections
Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…
ISC2 Cleveland Chapter Member Meeting - March 2026
ISC2 Cleveland Chapter March MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…
Policy as Code: Stop Writing Policies and Start Compiling Them
The Problem Nobody Wants to Talk AboutLet me paint a picture most security leaders will recognize.You have 30+ policies living as Word documents on SharePoint.…
Security Noise - AI is Exploring The Deep Blue CVEs
On this episode of Security Noise, we explore the cutting-edge use of AI in vulnerability research, exploit development, and cybersecurity defense with guests…
Building a Detection Foundation: Part 4 - Sysmon
Filling the Gaps Native Logging Can'tAt this point in our series, we have Windows Security events capturing logon sessions and process creation, and…
ABC7 Chicago - March Madness betting, ticket scams targeting college basketball tournament fans
March Madness is in full swing and so are the scams, the latest being fake tickets sales and "bogus" bracket challenges. Advisory Solutions Director Alex…
Discord Livestream - AMA: Incident Response
Ask us anything about incident response! Join us for an exclusive Discord Livestream with IR Practice Lead Ryan Macfarlane.
Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found
Invisible password sprays. Invisible logins. Full tokens returned.Nyxgeek here. It's 2026 and I've got two more Azure Entra ID sign-in log bypasses…
Copilot Security: What to Know Before You Go
In this webinar, our experts will walk you through the critical groundwork needed before deploying Microsoft 365 Copilot. Learn how you can best prepare for…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
