Paul Marsh

Background

About Paul Marsh

No recruiters / recruitment agencies!(this is after being badly burnt by a Bristol based outfit) Paul is a seasoned penetration tester with over 23 years experience of testing a wide variety of systems from smart-meters to enterprise wide networks. Paul joined IBM’s Business Consulting Services practice as a lead penetration tester in the year after working at an IBM business partner on AS/400 security and networking for a number of years. Paul’s security testing experience covers Windows,*nix and OS/400 security, VOIP infrastructure, wireless technologies, network infrastructure, firewall technology, IoT, RF and Microwave technology, as well as in-depth experience in electronics. Paul has also spoken at a number of security events, including; UK energy provider - Smart Grid / AMI security Large US bank - VSAT security BruCon - Satellite Hacking, Ghent, Belgium 44Con - VSAT Security, London, England B-Sides - Satellite Hacking, London, England 44Con - Satellite Hacking, London, England Middle East oil producer - VSAT security B-Sides - embedded serial ports In addition to the above, Paul is often asked to speak to closed groups, typically to company IT / security departments. In conjunction with his SecQuest Information Security colleagues, he assists in the delivery of the following types of assessments; Network / Infrastructure penetration testing Web / Mobile application testing API testing Wireless LAN / Bluetooth / DECT / dPMR / TETRA / MotoTRBO / bespoke wireless link security assessments SCADA / Smart Home / Smart Grid testing Computer Forensics and Examinations VSAT / Satellite data testing Hardware hacking Mag-Stripe analysis, emulation & decoding ITHC / CoCo testing In his spare time, Paul enjoys technical hobbies including CNC machining, ham radio and electronic design / construction. Paul also is an enthusiastic runner, plodding around 10-15 miles a week, including park runs etc. Specialties: A seasoned penetration tester with the ability to translate technical security issues into simple 'real world' language. Note: If you are in education and are looking for some advice on getting a toehold into the infosec industry, please feel free to contact me / connect with me on LI. This industry needs more new blood so if I can help you break in to it, I'd be delighted to.