Looking for a job

John Basmayor

@johnbasmayor

Security researcher at Trustwave who developed LLM-powered threat intelligence and malware triage automation.

At Trustwave (now LevelBlue), I researched attacker techniques and vulnerabilities, analyzed malware, and developed proof-of-concept exploits and detection rules. I also built LLM-powered automation for threat intelligence enrichment, malware triage, and indicator extraction.

I applied AI and machine learning to malware clustering, phishing classification, code similarity analysis, and anomaly detection. For managed security engagements, I engineered data pipelines and detections across CrowdStrike NG-SIEM (LogScale) and Splunk, and built Cribl Stream pipelines for parsing and routing.

Earlier, I led a malware research team at Dynamic Strategy Solutions Experts Corporation and worked across security engineering, threat hunting, incident response, and cloud security. My personal projects include Atlas-Sentinel, an AI-powered chat protection SaaS, and a platform for tracking ransomware groups.

Experience

Work history, roles, and key accomplishments

Security Researcher

Trustwave

Apr 2023 - Jun 2026 (3 years 2 months)

Researched emerging attacker techniques and vulnerabilities, performed malware reverse engineering and behavioral analysis, and developed detection rules and signatures. Built AI/ML-powered automation for threat intelligence enrichment and malware triage.

Team Lead, Malware Researcher

Dynamic Strategy Solutions Experts Corporation

Jun 2022 - Mar 2023 (9 months)

Led a malware research team delivering threat intelligence and detection solutions. Coordinated with incident response and SOC teams to mitigate advanced threats.

Threat Intelligence Malware Analysis Atomic Red Team Burp suite Wireshark ProjectDiscovery SSL Certificates JARM Fingerprinting Incident Response SOC

Security Engineer

CreateIT

Feb 2021 - Jun 2022 (1 year 4 months)

Conducted proactive threat hunting and vulnerability assessments. Collaborated on security architecture improvements and vulnerability remediation.

Threat Hunting Vulnerability Assessment Wireshark ThreatConnect Postman Security Architecture Incident Response

Lead Cybersecurity Engineer

NEXSYS-ONE

Feb 2020 - Jan 2021 (11 months)

Led worldwide deployment of Microsoft Intune Autopilot and endpoint protection. Managed ISO 27001 certification renewal and hybrid cloud/server environment hardening.

Microsoft Intune Autopilot Endpoint Protection ISO 27001 Cloud Security Hybrid cloud Server Hardening