With DefCon coming up this weekend, A-LIGN would like to take the time to highlight one of our senior consultants, Van Bettis, who specializes in penetration testing.
- What is your role at A-LIGN?
At A-LIGN, I perform penetration testing services for PCI-DSS, FISMA, and regular penetration testing. The types of penetration testing services that I perform includes: Web Application Testing, External Testing, Internal Testing, API Testing, Segmentation Testing and Social Engineering.
- What challenges do you think organizations face that makes security and compliance audits necessary?
As technology continues to develop rapidly, organizations begin to phase out aging equipment. Some of these older systems may be installed by a previous system’s administrator and the organization may be unaware of their existence. These aged machines present security risks within the network due to their requirements of operation and exposure. These machines, along with those newly implemented are often the way I get into a client’s network.
- What value does penetration testing provide clients?
Penetration testing provides a client with simulated attacks on their environment during a controlled engagement. By penetration testing our clients, we identify and help remediate discovered vulnerabilities, which increases their overall defense.
- What is your favorite part about working at A-LIGN?
Working for A-LIGN gives me the opportunity to test a different network every engagement. No client’s network is the same, therefore every test presents a new challenge.
- Name an A-LIGN value and what does it mean to you? Commit to Quality, Be All In, Innovate Constantly, Do the Right Thing Always.
Do the Right Thing Always, is the most important to me. To ‘Do the Right Thing Always’ means to be ethical, and as a certified ethical hacker it’s my job to ensure when I am operating within these environments I maintain my own ethics and moral code to protect the information garnered and the client’s systems.
Have questions about Van Bettis, penetration testing or joining the A-LIGN team? Contact us at firstname.lastname@example.org for more information. Keep an eye out for A-LIGN’s penetration testers at DEFCON from July 27 to July 30, 2017 at Caesar’s Palace in Las Vegas!