Richard G. Deacon III
[pic]
North Ridgeville, OH 44039
***********@*****.***
[pic]
CAREER OBJECTIVE AND OUTLOOK
To obtain a position that fully utilizes my skills involving information
security.
AREAS OF EXPERIENCE
IT/IS Field Proficiencies
Certified Ethical Hacker
CISSP - In Progress
Penetration Testing & Vulnerability Assessment - Network, Web, Social and
Physical
Penetration Test/Audit Report Creation
Incident Response/Data Forensics
Familiar with Audit/Compliance Standards (PCI, SOX, HIPAA)
Some Development in Python, PHP, Bash, C# and VB.Net
Windows and Linux Binary Reverse Engineering
Exploit Creation
Firewall Rulebases
Enterprise Level Antivirus
Linux/*nix Systems
Social Networking/Blogging Marketing
Network Topology and Hardware
A+ Certified
Microsoft Active Directory Users and Groups including Group Policy
Microsoft Server Deployment
Microsoft Windows (9x, XP, Vista, 7)
Database Design and Implementation, including SQL
Basic Database Administration
Web Programming (HTML, CSS, DHTML, JavaScript)
Notebook and Desktop Construction, Troubleshooting, and Hardware upgrades
Network Software Deployments and Installations
EDUCATION
Lorain County Community College, Elyria, Ohio
Through the University of Akron, Akron, Ohio
Bachelor's Degree in Computer Information Systems - Networking (In
Progress)
Current GPA: 2.85. I am currently attending LCCC to earn a Bachelor's
Degree in Computer Information Systems - Networking from the University of
Akron utilizing the school's University Partnership program. I am currently
attending this college part-time while working full-time.
Lorain County Community College, Elyria, Ohio
Associate of Arts Degree
Graduating GPA: 2.9. I have earned my Associate of Arts Degree through LCCC
which is a general credit transfer degree. My concentration has been on
Computer Information Systems and Networking classes.
Elyria Catholic High School, Elyria, Ohio
H.S., 2004
GPA: 3.100. Commendable Attendance and 3.1 GPA.
PROFESSIONAL LECTURE
"Open Source War Dialing", Information Security Summit, Beachwood, Ohio,
October, 2009
Invited and spoke with a colleague and friend on using a home built
Asterisk server as a method to test and evaluate phone systems and modems
for vulnerabilities. Included live demonstration.
"Hacking Social Lives: MySpace", DEFCON 15, Las Vegas, Nevada, August 2007
I was invited to speak at DEFCON 15 in Las Vegas, Nevada. I delivered a 50
minute presentation on multiple security issues and vulnerabilities in the
popular social networking site, MySpace.com. This included a live
demonstration of a cross site scripting and session hijacking exploit.
"Cross Site Scripting: MySpace.com", Notacon 4, Cleveland, Ohio, April 2007
Invited to speak at Notacon 4 in Cleveland, Ohio. Delivered a lecture
discussing Cross Site Scripting vulnerabilities in MySpace.com and how to
exploit them. Spoke to an audience of 150 people.
PUBLICATIONS
"XSS'ing MySpace.com", 2600 (The Hacker Quarterly) Magazine, Volume 23,
Issue 1
An article was published in the magazine that involved the Cross Site
Scripting vulnerabilities found in MySpace.com. Discussed how to find these
vulnerabilities and exploit them.
Multiple Articles, The Eye of the Storm(Hurricane Labs Newsletter)
Publish monthly articles on varying security and penetration testing
topics.
EMPLOYMENT SUMMARY
Hurricane Labs, LLC, Independence, Ohio
Security Analyst, June 2009 - Present
Currently work as a Security Analyst dealing mainly with penetration
testing and security audits. Perform monthly and project based network,
web, physical and social tests. Code development and scripting is also
performed. Data forensics, security device testing and internal penetration
tests are also in the scope of my duties. Lead and managed multiple
engagements. Also in charge of delivering penetration test reports to
executives and employees at customer sites.
Howard, Wershbale & Co., Beachwood, Ohio
IT Specialist, March 2006 - Present
Worked as an IT Specialist, dealing with many system administration and
network administration duties. Dealt directly with end users as well as
network and system issues. Install and deployed all hardware (laptops and
desktops), as well as servers. Managed all of the security operations,
including internal vulnerability assessments.
Executive Benefit Advisors, Cleveland, Ohio
General IT Position, Web Development, 2003 - 2008
In charge of computer installation/maintenance, networking
installation/administration, and web design/coding. Also developed and
implemented standard security procedures. Project based.