Fortifi Cyber

Responsible for all Penetration Testing activities globally within Fortifi Cyber

Creating and improving new and innovative cyber security solutions based on customer conversations and ongoing research about the industry.

Supporting the sales team from a technical perspective, ensuring that projects we scope as a team are providing genuine value for customers and making sure that they're kept informed throughout the engagement process.
 
Leading the penetration testing team on R&D, finding new vulnerabilities, creating internal tooling as well as new product lines.

Director

Defense.com™

Defense.com is the SaaS platform used to deliver various products and services from Bulletproof including Penetration Testing.

Head of Penetration Testing

Bulletproof (Cyber Security)

Responsible for all Penetration Testing activities globally within Bulletproof, Target Defense & Defense.com.

Defining and continually improving the penetration testing process from lead generation through to delivery and after-care.
Supporting the sales team from a technical perspective, providing support scoping projects and improving processes across the sales process.
Leading the penetration testing team on R&D, creating innovating internal tooling to aid in the delivery of penetration testing projects.
Responsible for recruitment and development within the global team, including the creation of hiring processes, internal training courses and a graduate scheme.

NCC Group

Led and acted as an individual contributor on penetration tests across various elements utilising a variety of different technical skillsets.
Experience leading engagements in various fields, including a large number of projects in government and finance/banking.
Assisted in scoping engagements across a large number of testing areas.
Led a number of large engagements (50+ days) as a team leader, additionally Seconded to Project Management Office to aid in larger projects.

Managing Security Consultant

Secarma

Lead Penetration tester performing web application assessments and internal/external infrastructure assessments, largely dealing with SMEs.

Assisted in developing new products including Web Application Firewalls.

Reported directly to Managing Director of parent company on a weekly basis to discuss business development.

Security Consultant

Hermetic Security

Managed day-to-day running of the business, developing new products with a focus towards user education  of security and general security awareness.

National Semiconductor

Worldwide Quality Network Intern

Kieran R.

Financial sector

Rada Cyber Security

Cyber Security Consultant

Piclo

Working as a one-woman security team, my responsibilities as the Cyber Security Specialist include working with multiple teams to ensure the business and its products are secure and compliant. This involves:
- Helping product teams find, understand and remediate security vulnerabilities
- Reviewing the security of the company's suppliers
- Communicating the company's security posture to internal and external stakeholders
- Encouraging & maintaining a culture of security across the organisation
- Staying on top of the ever changing cyber security landscape

Cyber Security Specialist

UserTesting

In addition to my existing duties as a security analyst, I have now taken charge of UserTesting's bug bounty program and standard security questionnaires management.

Security Analyst III

My duties as a Security Analyst include:
- Assisting Customers in understanding and evaluating UserTesting's security profile
- Identifying and communicating current and emerging security threats  
- Identifying security gaps in existing and proposed technologies and recommending changes or enhancements
- Assisting in developing and maintaining enterprise information security policies, technical standards, guidelines, and procedures.
- Assisting in the process of conducting risk assessments of internal/external applications and solutions, ensuring adherence to regulations, policies, and frameworks
- Assisting in the process of conducting vendor information security risk reviews and communicate the results.
- Reviewing security language in contracts, work orders and other customer agreements to make sure it aligns with and can be met by company policies and practices.
- Assisting in maintaining compliance with internal controls and certifications 
- Providing ongoing, up-to-date security awareness training.
- Responding to security incidents and help keep track of post-incident tasks 
- Managing the phishing awareness program
- Contributing to the design and implementation of enterprise-class security systems.
- Participating in internal audits and support external audits

Security Analyst II

eForensics Magazine

I've created original research, learning materials and guided students through iOS Social Media Forensics topics, including analysis of Facebook Messenger, WhatsApp, Instagram and Viber artefacts.

Course Instructor

Fortinet

As a security engineer at Fortinet I've worked on various security and devops projects including:
- security improvements to the build pipeline
- authoring and delivering internal security training
- cost & security optimisation of cloud and containerised deployments
- design and implementation of an internal monitoring platform

Security Engineer

I give private lessons to students supporting them in their preparations for IGCSE and A Level exams in Mathematics, Extended Mathematics and Computer Science.

Private Tutor

Edinburgh Science

After having worked with Edinburgh Science abroad, I have taken up a role of delivering cyber-related workshops (How To Break The Internet - https://www.sciencefestival.co.uk/event-details/how-to-break-the-internet & App Factory - https://www.sciencefestival.co.uk/event-details/app-factory) during the Edinburgh Science Festival.

Senior Science Communicator

Edinburgh Napier University

As an IT Support Student Helper, I assist fellow students and staff with accessing the University's IT and library services. The duties include:
- software and hardware support
- tasks management within the Unidesk platform
- student database & accounts services

IT Support

Working as a Student Ambassador includes taking up a range of different roles.  From leading campus tours to conducting phone surveying on behalf of the University and assisting at open days, it all comes down to being a proactive representative of Edinburgh Napier University.
In 2017, I have additionally taken up the following roles:

- Undergraduate Admissions Assistant - supporting the UG Admissions team in managing the University student database, office archives and correspondence with prospective students.
- Course Enquiries Assistant - assisting the Student Recruitment team in the busy time of Clearing and PG admissions by managing the course enquiries.

Student Ambassador

I support the lecturer in running labs for the Computer Systems 1 (CSN07101) module. 
The curriculum includes:
Computer Architecture
Basic computer architecture and operating principles. Memory and I/O devices. Case Studies for PC microcomputer and embedded system architectures.

Computers Networks
Networking components. Wide and local area networks use and topographies.

Operating Systems
Basic structure, components and functions of Operating Systems (OS), for example, the Kernel, Memory Management, File Systems, Processes and Threads. Case Study examinations of common PC OSs - Windows and Linux. 
As listed on http://www.modules.napier.ac.uk/Module.aspx?ID=CSN07101.

Teaching Assistant

I help students during lab sessions in the Scripting for Cybersecurity and Networks (CSN08114) module.
The syllabus includes topics such as:
•	Introduction to Python
•	Building applications using a general purpose scripting language
•	Functions, modules, packages and libraries
•	Coding and scripting techniques
•	Exception handling
•	Testing and debugging 
•	Systems programming
•	Working with external data and applications (e.g. text files, databases)

Example case studies: 
•	Encryption and decryption using a simple algorithm such as Caesar cipher; 
•	Cracking passwords with the use of rainbow tables; 
•	Web reconnaissance – e.g. scraping email addresses and links from websites; 
•	Network traffic analysis – working with network logs to extract traffic patterns, location of IP addresses in network logs; 
•	Geolocation analysis – e.g. mapping of Satnav logs.
(from: http://www.modules.napier.ac.uk/Module.aspx?ID=CSN08114)

Completing a research internship in Windows RAM forensics, including Windows kernel privilege escalation, SQLServer and PostgreSQL administration and C# programming.

Student Intern in Windows RAM Forensics

Edinburgh International Science Festival

I travelled to the UAE yet again to deliver workshops in Artificial Intelligence, Car Hacking and Blockchain at the Cyber Quest event in Dubai. 
The preparations in Edinburgh included content testing for a CTF and cyber exercise and workshop delivery training.

Cyber Workshop Leader

I am an AWS and SANS certified cyber security professional with experience ranging from security engineering amd user education to risk & incident management and compliance. Currently a founder and cyber security consultant at Rada Cyber Security.

taplio

The Battle

Kieran R.

Kinga Kieczkowska

Followers

Posts

Engagements

Likes

Ready to grow your LinkedIn presence?