EXPERIENCE
Philip DuBois brings over 20 years of wide-ranging IT experience to TrustedSec, including perimeter & internal security, incident & DR recovery, vulnerability management, network architecture, hyper-converged infrastructure, database & systems architecture, and cloud design & migration. Philip has worked in a variety of sectors, including public finance, private distribution & logistics, state government, and military defense contracting.
EDUCATION & CERTIFICATIONS
- Bachelor of Science, Computer Science, Computer Information Systems minor, West Texas A&M University
PROFESSIONAL AFFILIATIONS
OWASP, Oklahoma City Chapter (Member)
PASSION FOR SECURITY
Philip’s security passion has grown steadily over his lengthy career. His IT journey began in Department of Defense contracting and then migrated to state government contracting, private sector logistics, and finance InfoSec. He has had a direct hand in the development, auditing, and operation of multiple complex IT systems. As a direct result, Philip has witnessed many security successes and failures across a wide variety of technologies and sectors. He has remediated and performed root-cause/corrective action for multiple enterprise security incidents, as well as observed their long-term impact and effectiveness. He brings this experience, along with the desire to help others harden and secure their IT, ultimately reducing threats and decreasing security incidents.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Dungeons and Daemons
Play Roll for Initiative. Hack the Planet.Dungeons & Daemons is a cybersecurity RPG that drops you into the boots of a Red Team operator on a live…
You Had Us at the First Alert: A Guide to Finding Frequently Missed Detections
Join us for this webinar to get a clearer picture of where your detection coverage has blind spots and a practical roadmap for closing them before a real…
Benchmarking Self-Hosted LLMs for Offensive Security
We put LLMs to the test—let's find out how good AI is at hacking! We walk through six simple challenges with intentionally naïve setups to test how capable…
TrustedSec Livestream - AMA: Detection Engineering in 2026 and Beyond with John Dwyer
Come prepared with your questions and walk away with actionable knowledge to sharpen your detection capabilities.
IAM the Captain Now – Hijacking Azure Identity Access
I decided to spend some research time diving in depth into Identity and Access Management (IAM) within Microsoft Azure. I am going to show you within this blog…
Building a Detection Foundation: Part 5 - Correlation in Practice
From Data Sources to DetectionWe've covered a lot of ground in this series: Windows Security events for logon tracking and process execution; PowerShell…
Security Noise - A Goblin, a Ghost, and a Ninja Walk into the Azure Bar
On this episode, Geoff and Skyler are joined by NyxGeek to discuss his suite of Azure bypass techniques. Since these techniques leave no trace, what does it…
Reduce Repetition and Free up Time With Mobile File Extractor
If you do the same thing three times, automate it. Introducing Mobile Data Extractor, a Python tool that handles the repetitive work of mobile app data…
ISC2 Cleveland Chapter Member Meeting - March 2026
ISC2 Cleveland Chapter March MeetupCome join us for our meetup! The ISC2 Cleveland Chapter is hosting an exciting in-person event for all cybersecurity…
Policy as Code: Stop Writing Policies and Start Compiling Them
The Problem Nobody Wants to Talk AboutLet me paint a picture most security leaders will recognize.You have 30+ policies living as Word documents on SharePoint.…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
