Skip to Main Content
All Trimarc services are now delivered through TrustedSec! Learn more

Patrick "Lilly" Mayo

Senior Security Consultant

EXPERIENCE
Prior to joining TrustedSec, Patrick performed penetration testing and security engineering for cloud security for multiple private companies and government organizations. Patrick has experience with securing and engineering cloud-native infrastructure to aid in meeting industry or regulation compliance requirements.

EDUCATION & CERTIFICATIONS

  • Master of Science: Information Assurance, University of Advanced Technology
  • GIAC Cloud Penetration Tester (GCPN)
  • Offensive Security Certified Professional (OSCP)
  • Offensive Security Web Expert (OSWE)
  • AWS Certified Security - Specialty
  • Certified Information Systems Security Professional (CISSP)
  • CompTIA Security+
  • CompTIA Network+

PASSION FOR SECURITY
Patrick is passionate about assisting clients transition to cloud-first solutions in order to help improve security, aid in operations, and meet organizational and regulatory requirements. He achieves this by securing automation and infrastructure components in cloud and on-premises environments and by understanding how exploits function and occur.

Featured Blogs And Resources

Discover the blogs, analysis, webinars, and podcasts by this team member.

Blog June 15 2023

Control Tower Pivoting Using the Default Role

Using AWS Control Tower to Prevent Pivoting Attacks on AWS Organizations and Control Tower.

Read about this article
Webinars June 22 2022

Penetration Testing Your Cloud Environment

Discover how to validate cloud security with expert Paul Burkeland and team, exploring cloud attack surfaces, traditional vs. cloud penetration tests, and…

Read about this article
Webinars April 15 2026

You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections

Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…

Read about this article
Events TrustedSec HQ | March 31 2026

ISC2 Cleveland Chapter Member Meeting - March 2026

ISC2 Cleveland Chapter March MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…

Read about this article
Blog March 26 2026

Policy as Code: Stop Writing Policies and Start Compiling Them

The Problem Nobody Wants to Talk AboutLet me paint a picture most security leaders will recognize.You have 30+ policies living as Word documents on SharePoint.…

Read about this article
Podcasts March 24 2026

Security Noise - AI is Exploring The Deep Blue CVEs

On this episode of Security Noise, we explore the cutting-edge use of AI in vulnerability research, exploit development, and cybersecurity defense with guests…

Read about this article
Blog March 24 2026

Building a Detection Foundation: Part 4 - Sysmon

Filling the Gaps Native Logging Can'tAt this point in our series, we have Windows Security events capturing logon sessions and process creation, and…

Read about this article
News March 20 2026

ABC7 Chicago - March Madness betting, ticket scams targeting college basketball tournament fans

March Madness is in full swing and so are the scams, the latest being fake tickets sales and "bogus" bracket challenges. Advisory Solutions Director Alex…

Read about this article
Events March 19 2026

Discord Livestream - AMA: Incident Response

Ask us anything about incident response! Join us for an exclusive Discord Livestream with IR Practice Lead Ryan Macfarlane.

Read about this article
Blog March 19 2026

Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

Invisible password sprays. Invisible logins. Full tokens returned.Nyxgeek here. It's 2026 and I've got two more Azure Entra ID sign-in log bypasses…

Read about this article

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.