EXPERIENCE
Zach Bevilacqua found his calling in Information Security after building a career in various PC repair positions before moving to System Administration and Engineering. Zach served as a subject matter expert for a Security Operations Center and fulfilled roles as a detection engineer and security controls tester, which allowed him to cover many aspects of Information Security.
EDUCATION & CERTIFICATIONS
- Offensive Security Certified Professional (OSCP)
INDUSTRY CONTRIBUTIONS
Zach has spoken at several conferences on topics ranging from threat hunting to building a detection and response program in the enterprise.
PASSION FOR SECURITY
Early in his career, Zach was interested in the offensive side of security. While working toward that goal, he learned about the world of Information Security and his place within it. Zach is driven by learning how things are broken and fixed and enjoys sharing his knowledge with others.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
From Zero to Purple
Learn how to create and deploy Internet Shortcut files for adversary emulation and detection engineering using Python, SMB, and WebDAV servers, a useful tool…
Engagement Guide: How to Prepare for Your Purple Team
TrustedSec's Purple Team engagements prepare clients for security assessments by identifying gaps in security coverage, logging, and tooling, with offerings…
Modeling Malicious Code: Hacking in 3D
This blog post reveals how attackers can exploit the.3mf file format to smuggle malicious code into an environment, bypassing off-the-shelf detection…
Queen City Conference
TrustedSec is proud to sponsor and have a booth at this year's Queen City Conference!
BSides Columbus 2026
Enroll in our pre-conference training and don't miss the keynote by Founder & CEO David Kennedy at BSides Columbus!
SAINTCON 2026
We're showing up as a proud sponsor at this year's SAINTCON, come find us at our booth!
Navigating the Initial AI Best-Practice Framework Offerings
Discover the current landscape of AI best-practice frameworks, what each major framework offers, where it works well, where it falls short, and how to decide…
Two Config Files, Two Release Tracks, and One Very Bad Commit
Some of the best infrastructure improvements start with one bad afternoon. In the final part of this blog series, we walk through the configuration, release…
TrustedSec Joins the OpenAI Daybreak Defense Network
We're part of OpenAI’s Daybreak Defense Network—what does that mean for our customers? Go deeper, get to the evidence faster, and make real security…
Security Noise - Tabletops: Roll for Initiative
On this episode, we chat about what goes into developing and moderating Tabletop Exercises (TTX) and the role of being an "InfoSec Dungeon Master" on a TTX,…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
