Julian Catrambone

Service Architect at SpecterOps

United States

About

Over the course of my career, I have worked as an Offensive security consultant, and more recently as a defensive security consultant. This has given me the opportunity to work with several internal red and blue teams in various capacities. From, identifying and exploiting weaknesses inside of CI/CD pipelines, bridging internal access to administrative access to various cloud services, and conducting purple team assessments in coordination with the existing blue team. To analyzing and identifying malicious activity in a SOC, building implementing new detections as well as updating previously built detections making them more robust throughout the process.

Experience

  • Service Architect at SpecterOps
    Nov 2023 - Present · 3 yrs

  • Senior Offensive Security Engineer at Salesforce
    Jan 2021 - Nov 2023 · 2 yrs 11 mos

  • Senior Consultant at SpecterOps
    Jun 2018 - Jan 2021 · 2 yrs 8 mos

    While working with SpecterOps I have functioned as an instructor for both public and private training offerings, a senior adversary simulation consultant, and a detection engineering consultant.

  • Security Engineer at Gotham Digital Science, a Stroz Friedberg company
    Mar 2017 - Jun 2018 · 1 yr 4 mos

    Conducted Network Penetration Testing, Web Application Assessments, Social Engineering Engagements, and Red Team Exercises to discover vulnerabilities, demonstrate risk, and help remediate those vulnerabilities and risks.

  • Penetration Tester at Veris Group, LLC (now Coalfire Systems)
    May 2016 - Mar 2017 · 11 mos

    Executed several assessments for a wide variety of clients. This included, Physical Security assessments, Internal Network Penetration testing, FedRAMP Web Application Assessments, and External Network Assessments.