Tim Reed
Elected Member - CREST Penetration Testing Focus Group Sub-Committee at CREST- Claim this Profile
Click to upgrade to our gold package
for the full feature experience.
-
English Native or bilingual proficiency
-
Java Professional working proficiency
-
Perl/Python Professional working proficiency
-
ASM Limited working proficiency
-
C/C++ Limited working proficiency
-
HTML/CSS Limited working proficiency
-
Bash Professional working proficiency
Topline Score
Bio
Credentials
-
Offensive Security Certified Professional (OSCP)
Offensive SecuritySep, 2013- Nov, 2024 -
CREST Certified Web Application Tester (CCT App)
CREST - www.crest-approved.orgFeb, 2022- Nov, 2024 -
CREST Registered Tester (CRT)
CREST - www.crest-approved.orgMay, 2018- Nov, 2024
Experience
-
CREST
-
United Kingdom
-
Computer and Network Security
-
1 - 100 Employee
-
Elected Member - CREST Penetration Testing Focus Group Sub-Committee
-
Jul 2023 - Present
Focus Groups help CREST to continually monitor best practice in the cyber security industry and aid in the development of its accreditation and certification requirements.
-
-
CREST Assessor (Development)
-
Mar 2023 - Present
CREST is an international not-for-profit, membership body representing the global cyber security industry. Tim is part of the CREST Assessors team, responsible for the design and development of certification examinations for individuals within the penetration testing industry.
-
-
-
Sentrium Security Ltd
-
United Kingdom
-
Computer and Network Security
-
1 - 100 Employee
-
Director
-
Jul 2019 - Present
Tim is one of the founding members of Sentrium Security Ltd, a boutique cyber security consultancy that provides a wide range of high quality assessment services designed to identify weaknesses within client security posture. In his role at Sentrium, Tim is responsible for the innovation and strategic development of all technical services delivered for clients. Using the experience gained during his time working within the security industry, he ensures that the services and products offered by… Show more Tim is one of the founding members of Sentrium Security Ltd, a boutique cyber security consultancy that provides a wide range of high quality assessment services designed to identify weaknesses within client security posture. In his role at Sentrium, Tim is responsible for the innovation and strategic development of all technical services delivered for clients. Using the experience gained during his time working within the security industry, he ensures that the services and products offered by Sentrium are of a high quality and provide deep visibility into the threats faced by an organisation and the vulnerabilities present within their IT estate. Show less Tim is one of the founding members of Sentrium Security Ltd, a boutique cyber security consultancy that provides a wide range of high quality assessment services designed to identify weaknesses within client security posture. In his role at Sentrium, Tim is responsible for the innovation and strategic development of all technical services delivered for clients. Using the experience gained during his time working within the security industry, he ensures that the services and products offered by… Show more Tim is one of the founding members of Sentrium Security Ltd, a boutique cyber security consultancy that provides a wide range of high quality assessment services designed to identify weaknesses within client security posture. In his role at Sentrium, Tim is responsible for the innovation and strategic development of all technical services delivered for clients. Using the experience gained during his time working within the security industry, he ensures that the services and products offered by Sentrium are of a high quality and provide deep visibility into the threats faced by an organisation and the vulnerabilities present within their IT estate. Show less
-
-
-
Redscan, A Kroll Business
-
United Kingdom
-
Computer and Network Security
-
1 - 100 Employee
-
Senior Security Consultant
-
Jan 2018 - Jul 2019
While working for Redscan, Tim was responsible for the management and delivery of penetration tests for clients, using deep technical knowledge to assess client networks for security weaknesses. As part of these engagements, he was responsible for communicating with clients and ensuring that individuals at all technical levels were able to understand any vulnerabilities that were discovered. While working for Redscan, Tim was responsible for the management and delivery of penetration tests for clients, using deep technical knowledge to assess client networks for security weaknesses. As part of these engagements, he was responsible for communicating with clients and ensuring that individuals at all technical levels were able to understand any vulnerabilities that were discovered.
-
-
-
Portcullis Computer Security Ltd (now part of Cisco)
-
Computer and Network Security
-
1 - 100 Employee
-
Security Consultant
-
Aug 2016 - Jan 2018
Upon completion of his degree, Tim returned to Portcullis (who had been acquired by Cisco) as a computer security consultant. In addition to penetration testing and consultancy work, he was responsible for the development and innovation of the phishing service provided by Security Advisory Services, ensuring that the tactics, techniques and procedures reflected those used by legitimate threats to clients. As service owner, he also oversaw the development of a toolset that enabled the quick and… Show more Upon completion of his degree, Tim returned to Portcullis (who had been acquired by Cisco) as a computer security consultant. In addition to penetration testing and consultancy work, he was responsible for the development and innovation of the phishing service provided by Security Advisory Services, ensuring that the tactics, techniques and procedures reflected those used by legitimate threats to clients. As service owner, he also oversaw the development of a toolset that enabled the quick and easy deployment of the infrastructure required for phishing engagements. Show less Upon completion of his degree, Tim returned to Portcullis (who had been acquired by Cisco) as a computer security consultant. In addition to penetration testing and consultancy work, he was responsible for the development and innovation of the phishing service provided by Security Advisory Services, ensuring that the tactics, techniques and procedures reflected those used by legitimate threats to clients. As service owner, he also oversaw the development of a toolset that enabled the quick and… Show more Upon completion of his degree, Tim returned to Portcullis (who had been acquired by Cisco) as a computer security consultant. In addition to penetration testing and consultancy work, he was responsible for the development and innovation of the phishing service provided by Security Advisory Services, ensuring that the tactics, techniques and procedures reflected those used by legitimate threats to clients. As service owner, he also oversaw the development of a toolset that enabled the quick and easy deployment of the infrastructure required for phishing engagements. Show less
-
-
-
Portcullis Computer Security Ltd (now part of Cisco)
-
Computer and Network Security
-
1 - 100 Employee
-
Junior Penetration Tester - University Industrial Placement Year
-
Aug 2014 - Aug 2015
During his placement with Portcullis, Tim conducted penetration tests on a daily basis, in order to identify security weaknesses that could be utilised by malicious attackers to compromise client systems and data. Following the engagements, he was responsible for debriefing clients, ensuring individuals at all technical levels were able to understand any vulnerabilities that were discovered. Additionally, Tim was tasked to handle the security advisory process through which vendors of… Show more During his placement with Portcullis, Tim conducted penetration tests on a daily basis, in order to identify security weaknesses that could be utilised by malicious attackers to compromise client systems and data. Following the engagements, he was responsible for debriefing clients, ensuring individuals at all technical levels were able to understand any vulnerabilities that were discovered. Additionally, Tim was tasked to handle the security advisory process through which vendors of software would be informed of vulnerabilities identified by the testing team. This required a good level of communication skills in order to describe technical issues found in software to non-technical staff. Show less During his placement with Portcullis, Tim conducted penetration tests on a daily basis, in order to identify security weaknesses that could be utilised by malicious attackers to compromise client systems and data. Following the engagements, he was responsible for debriefing clients, ensuring individuals at all technical levels were able to understand any vulnerabilities that were discovered. Additionally, Tim was tasked to handle the security advisory process through which vendors of… Show more During his placement with Portcullis, Tim conducted penetration tests on a daily basis, in order to identify security weaknesses that could be utilised by malicious attackers to compromise client systems and data. Following the engagements, he was responsible for debriefing clients, ensuring individuals at all technical levels were able to understand any vulnerabilities that were discovered. Additionally, Tim was tasked to handle the security advisory process through which vendors of software would be informed of vulnerabilities identified by the testing team. This required a good level of communication skills in order to describe technical issues found in software to non-technical staff. Show less
-
-
-
HM Forces
-
Armed Forces
-
700 & Above Employee
-
Intelligence Operator/Security and Risk Management Specialist
-
Mar 2008 - Mar 2012
Security and risk management specialists within the Intelligence Corps are responsible for ensuring that British and NATO assets are protected, both in base and whilst deployed. This is achieved by conducting regular security inspections, security education and training, vetting of locally employed civilians and investigation in to breaches in security. Security and risk management specialists within the Intelligence Corps are responsible for ensuring that British and NATO assets are protected, both in base and whilst deployed. This is achieved by conducting regular security inspections, security education and training, vetting of locally employed civilians and investigation in to breaches in security.
-
-
Education
-
2012 - 2016
University of the West of England
Bachelor's degree, BSc (Hons) Forensic Computing and Security -
1997 - 2002
Bishops of Hereford's Bluecoat School
Community
