John Hammond

Cybersecurity Researcher | jh.live/training & jh.live/newsletter

San Francisco Bay Area

About

John Hammond is a cybersecurity researcher, educator and content creator. As part of the Adversary Tactics team at Huntress, John spends his days making hackers earn their access and helping tell the story. Previously, as a Department of Defense Cyber Training Academy instructor, he taught the Cyber Threat Emulation course, educating both civilian and military members on offensive Python, PowerShell, other scripting languages and the adversarial mindset. He has developed training material and information security challenges for events such as PicoCTF and competitions at DEFCON US. John speaks at security conferences such as BsidesNoVA, to students at colleges such as the US Naval Academy, and other online events including the SANS Holiday Hack Challenge/KringleCon. He is an online YouTube personality showcasing programming tutorials, CTF video walkthroughs and other cyber security content. John currently holds the following certifications: Security+, CEH, LFS, eJPT, eCPPT, PNPT, PCAP, OSWP, OSCP, OSCE, OSWE, OSEP, and OSED (OSCE(3)).

Experience

  • Huntress (5 yrs 11 mos)
    • Senior Principal Security Researcher
      Dec 2025 - Present · 7 mos

    • Principal Security Researcher
      Jul 2023 - Present · 3 yrs

    • Senior Security Researcher
      Aug 2020 - Jul 2023 · 3 yrs

  • Co-Founder & Owner at Just Hacking Training
    Apr 2024 - Present · 2 yrs 3 mos

  • Cybersecurity Content Creator at YouTube
    Sep 2009 - Present · 16 yrs 10 mos

    Develop cybersecurity video walkthroughs, programming tutorials, and other information security content on the online platform YouTube. Public speaker delivering presentations at community information security conferences and collegiate universities. Manage community of information sharing to encourage continued education and growth within the cyber security industry.

  • Cybersecurity Content Developer, SME at United States Department of Defense
    Jan 2020 - Jul 2020 · 7 mos

  • Red Team Cyber Operator at Defense Threat Reduction Agency
    2019 - 2020 · 1 yr

    Emulated advanced persistent threats as a penetration tester with expertise in host and network exploitation. Assisted in the development of the cyber red team engagement Standard Operating Procedure documentation. Created template for Red Cyber Operator Job Qualification Record documentation, detailing the required tasks cyber operators should be competent in to complete their assigned tasks while conducting engagements.