Asen K.

I’m a Certified Ethical Hacker (CEH) and a Certified Information Systems Security Professional (CISSP) with over 15 years of hands-on cybersecurity experience and more than 300 completed engagements. I specialize in penetration testing, social engineering, vulnerability management, incident response, and security program leadership. I’m also the creator of XDRAIV, a cybersecurity platform developed from real-world experience to support advanced detection, log analysis, and regulatory compliance. I hold a Master's in Cyber Security and Information Assurance (graduated with distinction from National University, San Diego, CA) and am currently pursuing a PhD in Cybersecurity. My work blends deep technical knowledge with practical risk management and executive-level strategy. ✅ Virtual CISO & Security Program Leadership As a Virtual CISO, I help companies build and mature their cybersecurity programs from the ground up. Key areas of focus: - Security Operations Architecture (SIEM, SOAR, EDR/XDR, etc.) - Strategic selection and deployment of security technologies - Regulatory compliance support (GDPR, NIS2, ISO 27001, etc.) - Vulnerability Management lifecycle – from detection to remediation - Policy and process design aligned with business risk 🛡️ Penetration Testing & Offensive Security I lead and execute offensive security engagements that go beyond scanning. My services mimic real-world threats to test and improve your defenses. Key services include: - Web app & API security testing - Internal/external network penetration testing - Threat modeling and attack surface analysis - Advanced social engineering campaigns (phishing, pretexting, physical access) 🎓 Cybersecurity Training & Awareness I provide hands-on, practical training programs for both technical teams and executive stakeholders. Programs include: - Regulatory frameworks (GDPR, NIS2, ISO 27001, HIPAA, etc.) - Security awareness and phishing simulations - Secure development & DevSecOps workshops - Incident response tabletop exercises Tools & Technologies I work with Burp Suite, Nessus, OpenVAS, Qualys, Nmap, Metasploit, Wireshark, SonarQube, HP Fortify, Wazuh, GoPhish, KnowBe4, PhishFrenzy, Suricata, and ELK. I use Python, Bash, C#, and SQL for scripting and automation. I have hands-on experience with both Linux and Windows environments, supporting threat detection, lateral movement analysis, and secure infrastructure design. I bring a balance of technical depth and leadership experience to every engagement. Whether you need strategic guidance, a security assessment, or specialized training, I’m ready to deliver results that matter.