Open to opportunities

Derek Lofaro

@dereklofaro

Message

Aspiring penetration tester with expertise in cybersecurity solutions.

Australia

Message

What I'm looking for

I seek a role that fosters growth, innovation, and collaboration in cybersecurity.

As a dedicated Cyber Security Analyst with a specialization in penetration testing, I have honed my skills through hands-on experience and continuous learning. Currently serving as a Cyber Security Officer with the Queensland Government, I execute advanced penetration testing and social engineering assessments, delivering actionable reports that enhance organizational security posture. My commitment to safeguarding digital assets drives my passion for developing custom security tools and implementing proactive security measures.

With a strong foundation in various cybersecurity frameworks such as the Mitre Attack Framework and OWASP standards, I am adept at aligning red team initiatives with security objectives. My technical expertise spans across server management, networking, virtualization, and cloud services, enabling me to tackle complex challenges effectively. I am particularly interested in contributing to organizations that prioritize operational security and are committed to innovative cybersecurity practices.

Experience

Work history, roles, and key accomplishments

Cyber Security Officer

Department of Education, Queensland Government

Jan 2023 - May 2024 (1 year 4 months)

As a Cyber Security Officer in Offensive Security, I executed advanced penetration testing, designed attack scenarios, and delivered actionable reports. I developed custom security tools, enhanced threat detection, and ensured regulatory compliance while aligning red team initiatives with security objectives.

Penetration Testing Vulnerability Assessment Incident Response Security Compliance Threat Detection Security Tools

Education

Degrees, certifications, and relevant coursework

Offensive Security

Certification, Penetration Testing

Currently studying for the Offensive Security Certified Professional (OSCP) certification, which focuses on advanced penetration testing skills.

Microsoft

Certification, Security Operations

Pursuing the Security Operations Analyst (SC-200) certification to enhance skills in security operations and threat detection.

EC-Council

Certification, Ethical Hacking

Achieved the Certified Ethical Hacker Practical certification, demonstrating practical skills in ethical hacking and security assessment.

TCM Security

Certification, Network Penetration Testing

Completed the Practical Network Penetration Tester course, focusing on real-world penetration testing techniques and tools.

Tafe Queensland

Dual Diploma, Networking and Systems Administration

Completed a Dual Diploma in Networking and Systems Administration, focusing on the essential skills required for managing and securing networked systems.