Teams at Bishop Fox

Conduct offensive security engagements across web applications, APIs, mobile applications, cloud platforms, serverless systems, and AI/LLM environments. Perform hands-on penetration testing, source-code review, vulnerability analysis, exploitation validation, security-control testing, reporting, remediation guidance, client presentations, and retesting. Manage engagements from scoping through delivery while collaborating with clients and internal teams.

Designs, develops, and deploys agentic AI systems for cybersecurity, including vulnerability analysis, threat detection, alert triage, secure code generation, and remediation recommendations. Builds RAG pipelines, LLM integrations, APIs, microservices, and cloud-based platforms. Implements AI guardrails, threat modeling, human-in-the-loop governance, adversarial testing, explainability, and performance optimization while integrating systems with SIEM, SOAR, vulnerability management, and endpoint security tools.

Leads a red team consulting practice while directly managing personnel and participating in red team, purple team, and social engineering engagements. Responsibilities include coaching consultants, coordinating staffing and development, designing attack scenarios, making operational security decisions, reviewing reports, improving methodologies, and maintaining expertise in Active Directory exploitation, cloud platforms, C2 frameworks, custom tooling, EDR evasion, scripting, reverse engineering, and social engineering assessments.