Skip to Main Content
All Trimarc services are now delivered through TrustedSec! Learn more

Zach Bevilacqua

Security Consultant

EXPERIENCE
Zach Bevilacqua found his calling in Information Security after building a career in various PC repair positions before moving to System Administration and Engineering. Zach served as a subject matter expert for a Security Operations Center and fulfilled roles as a detection engineer and security controls tester, which allowed him to cover many aspects of Information Security.

EDUCATION & CERTIFICATIONS

  • Offensive Security Certified Professional (OSCP)

INDUSTRY CONTRIBUTIONS
Zach has spoken at several conferences on topics ranging from threat hunting to building a detection and response program in the enterprise.

PASSION FOR SECURITY
Early in his career, Zach was interested in the offensive side of security. While working toward that goal, he learned about the world of Information Security and his place within it. Zach is driven by learning how things are broken and fixed and enjoys sharing his knowledge with others.

Featured Blogs And Resources

Discover the blogs, analysis, webinars, and podcasts by this team member.

Blog January 25 2024

From Zero to Purple

Learn how to create and deploy Internet Shortcut files for adversary emulation and detection engineering using Python, SMB, and WebDAV servers, a useful tool…

Read about this article
Blog January 18 2024

Engagement Guide: How to Prepare for Your Purple Team

TrustedSec's Purple Team engagements prepare clients for security assessments by identifying gaps in security coverage, logging, and tooling, with offerings…

Read about this article
Blog July 13 2023

Modeling Malicious Code: Hacking in 3D

This blog post reveals how attackers can exploit the.3mf file format to smuggle malicious code into an environment, bypassing off-the-shelf detection…

Read about this article
Blog January 20 2026

Colonel Clustered: Finding Outliers in Burp Intruder

TL;DR, gimme the goods: https://github.com/hoodoer/ColonelClusteredExtension has been submitted to the Bapp store, awaiting approval.This is a Burp Suite…

Read about this article
Events January 15 2026

Discord Livestream - Crash Course: Building an Analysis Strategy

In this livestream, we will cover the components of an incident response attack plan from a high level —including scoping, building an analysis strategy,…

Read about this article
Blog January 15 2026

CMMC Scope – Understanding the Sprawl

The CMMC program contains complex, and potentially confusing, scope requirements. Contractors that are preparing for a CMMC assessment will need to pay close…

Read about this article
News January 15 2026

WWL First News with Tommy Tucker - What to know about the big Verizon outage on Wednesday

A widespread Verizon outage left many without service, sparking conversation about digital dependence. Advisory Solutions Director Alex Hamerstone joins WWL…

Read about this article
Webinars January 14 2026

Tips for Incident Response Planning: Prepare Before Crisis Strikes

During our next webinar, our Incident Response experts will cover what organizations should do to prepare so they can respond quickly and be on the way to…

Read about this article
Blog January 08 2026

Updating the Sysmon Community Guide: Lessons Learned from the Front Lines

Over the past few weeks I’ve been spending a significant amount of time updating the Sysmon Community Guide. This wasn’t driven by theory, trends, or what…

Read about this article
News December 31 2025

News 5 Cleveland - Cuyahoga Falls woman battling with Meta to recover accounts being controlled by impersonator wanting money

A Cuyahoga Falls woman is fighting to regain stolen social media accounts used for a scam. Advisory Solutions Director Alex Hamerstone spoke with News 5…

Read about this article

Empower your business through better security design.

Talk directly with our experienced advisory consultants to learn how we can help.