Matt Watkins

Experienced cybersecurity professional who led the strategic development of red teaming and adversary simulation services. Engineered offensive infrastructure using advanced technologies like Terraform and open-source C2 frameworks. Delivered high-impact technical leadership across complex security engagements, consistently expanding client trust through customized and advanced assessments that precisely align with unique organizational threat landscapes and security postures.

Led advanced offensive security engagements across complex cloud and orchestrated environments. Performed over 100 infrastructure penetration tests, uncovering high-severity vulnerabilities in public cloud backends and services. Specialized in data exfiltration, insider threat simulations, and container compromise techniques, including IAM principal and access token exploitation. Demonstrated adaptability by leveraging client-specific custom tooling to achieve security engagement objectives.

- Identified and fulfilled skill gap in the organization’s technical services by learning iOS and Android security testing to perform mobile penetration tests. - Aligned Leviathan’s iOS and Android pentesting methodologies with the OWASP Mobile Application Security Testing Guide (OWASP-MASTG), improving the coverage, depth, and recognition of our testing standards. - Conducted numerous technical and non-technical interviews for mid and senior level positions.

- Delivered numerous high severity findings on both solo and collaborative penetration tests for dynamic web apps, APIs, and internal and external networks. - Developed internal playbook for network pentest methodologies, expanding and enhancing the OSINT, reconnaissance, enumeration, and exploitation phases of our engagements.

- Developed network protocol parsers and analyzers for Zeek, the networking security monitoring engine. Ranging from legacy protocols, such as Telnet, to emergent protocols at the time, such as MQTT. - Implemented new detection methods for Zeek’s SMB protocol analyzer to detect encryption algorithm downgrade attacks. As well as a tokenization and lexical analysis method for detecting SQL injection. Both detections increased accuracy and provided enhanced coverage of our product.