Peter M. Ponert

I'm a Cybersecurity Specialist committed to aligning security with business objectives. As a Full-Stack Developer, I excel in React and iOS, focusing on clean, defensive coding. My analytical skills and team collaboration drive project success. I innovate solutions for users, backed by experience in project management. I hold a Diploma in Cybersecurity with an engineering background, staying updated through tech articles and Twitter.

CompTIA Security+ Certified ce (SY0-601) Credential ID: KJDTZ63QPJRQ18CZ - [25+ CEUs to date] (Aug. 2023 - Aug. 2026)
Fortinet Certified Associate in Cybersecurity (Network Security Expert-3 FCA) Credential ID: 4538880933PP (Oct. 2023 - Oct. 2025)
(ISC)² Certified in Cybersecurity (CC) Credential ID: 1594294 - [19.25+ CPEs to date] (2023 - 2026)
Sept. 2024 PSIRT Training & CVSS v4.0 Certificate, FIRST Learning

Cyber Security Analyst - Private Company (Feb. 2024 - Present)

Managed WordPress domains and mitigated security compromises.
Implemented vulnerability test suites and managed incident response.
Audited & repaired JS/PHP code for security anomalies.
Managed a portfolio of WordPress domains and mitigated compromise with prudent Incident Response
Responsible for day-to-day security investigations / Peer mentoring / Banquet hall event presentations
Implemented Vulnerability Test Suites (ZAP, Nikto, Sucuri), Password management, Escalation procedures [Tier 4]
Manually Audited & Repaired preexisting JS/PHP code base for anomalies and exploits
Provided [Tier 3] support & Promoted the use of PSA software (Trello) implementing process improvements

"Overall, Peter has exceeded our expectations in every way, and I believe he has a bright future ahead. His dedication, professionalism, and enthusiasm have significantly impacted our company, and I wholeheartedly recommend him for any future opportunities he may pursue."

Business Owner & Operator
Business Owner & Operator
Kept Confidential

Office Administrator / Web Developer - Akrami & Associates (Apr. 2022 - Aug. 2022)

Managed Google Ad campaigns and increased CTR.
Provided IT support in a Windows 10 / Office 365 environment.
Developed React.js solutions and managed WordPress domains.
Managed a Google Ad Campaign budget with 100k+ impressions, increasing CTR ~2x of baseline
Provided timely [Tier 2] end-user technical device/network/software support in a Windows 10 / Office 365 environment
Crafted React.js Web Solutions, administered two WordPress domains
Advanced the firms' Social Media presence - Organizing a half dozen simulcast live-streams

DT Print Solutions, General Assistant & iOS App Prototyping, Toronto, Ontario (Apr. 2022 - Aug. 2022)

Managed Google Ad campaigns and increased CTR.
Provided IT support in a Windows 10 / Office 365 environment.
Developed React.js solutions and managed WordPress domains.
Operated industrial printing and C.N.C. equipment safely and efficiently
Ensured quality control of bespoke print solutions to large name brands & niche customers
Developed a mobile application prototype for adding digital watermarks-enhancing business value

Statistics Canada, Enumerator, Oakville, Ontario (Apr. 2022 - Aug. 2022)

Managed Google Ad campaigns and increased CTR.
Provided IT support in a Windows 10 / Office 365 environment.
Developed React.js solutions and managed WordPress domains.
Operated industrial printing and C.N.C. equipment safely and efficiently
Ensured quality control of bespoke print solutions to large name brands & niche customers
Developed a mobile application prototype for adding digital watermarks-enhancing business value

Remote Area Medical Volunteers Canada, Web Developer, Ottawa, Ontario (Apr. 2022 - Aug. 2022)

Managed Google Ad campaigns and increased CTR.
Provided IT support in a Windows 10 / Office 365 environment.
Developed React.js solutions and managed WordPress domains.
Operated industrial printing and C.N.C. equipment safely and efficiently
Ensured quality control of bespoke print solutions to large name brands & niche customers
Developed a mobile application prototype for adding digital watermarks-enhancing business value

Hugh Group Inc., Software Developer, Toronto, Ontario (Apr. 2022 - Aug. 2022)

Managed Google Ad campaigns and increased CTR.
Provided IT support in a Windows 10 / Office 365 environment.
Developed React.js solutions and managed WordPress domains.
Operated industrial printing and C.N.C. equipment safely and efficiently
Ensured quality control of bespoke print solutions to large name brands & niche customers
Developed a mobile application prototype for adding digital watermarks-enhancing business value

CIBC - Integrated Service Delivery & Operations, Developer (Apr. 2022 - Aug. 2022)

Managed Google Ad campaigns and increased CTR.
Provided IT support in a Windows 10 / Office 365 environment.
Developed React.js solutions and managed WordPress domains.
Operated industrial printing and C.N.C. equipment safely and efficiently
Ensured quality control of bespoke print solutions to large name brands & niche customers
Developed a mobile application prototype for adding digital watermarks-enhancing business value

> Education

Diploma in Cyber Security - Lighthouse Labs (2023)
Undergraduate Studies in Computer Engineering - University of Waterloo (2004 - 2006)

What I Bring to the Table

> Skills

Cybersecurity:

【 FRAMEWORKS 】 MITRE ATT&CK / D3FEND / NIST CSF 2.0, BOW-TIE Risk Modelling, Confidentiality-Integrity-Availability Triad
【 VULNERABILITY ASSESSMENT / SAST / DAST 】 Nikto, Greenbone OpenVAS, BurpSuite, InQL, Zed Attack Proxy, Veracode, Manual Code Audit
【 FORENSICS / INCIDENT RESPONSE 】 OpenStego, FileAlyzer, APKTool, Exeinfo PE, NetworkMiner, SQLMap, Volatility Framework, PDF Stream Dumper
【 DATA AGGREGATION & REPORTING 】 Splunk, Elasticsearch, Kibana, Prometheus, Grafana, Web Scraping
【 IDS 】 Snort, SecurityOnion, Zeek, OSSEC, RITA, YARA/SIGMA rules
【 IPS / EDR 】 Wazuh, Fortinet FortiGate
【 REVERSE ENGINEERING 】 Radare2, Ghidra, Sandboxes, FRIDA, OllyDbg, Binwalk, PulseView, REMnux, VirusTotal
【 IDENTITY & ACCESS MANAGEMENT 】 Active Directory, Entra ID, NAC, MFA, SSO, OAuth, YubiKey, OpenID, SAML, Federation, PKI, RBAC, Policies, ZeroTrust
【 CRYPTOGRAPHY & INTEGRITY 】 OpenPGP, Keybase, Blockchain, Post-Quantum Lattice, TPMs (Zymbit, Secure Enclave, Intel PTT), 802.11 Security (...WPA3, RADIUS)
【 EMAIL SECURITY 】 DKIM, PGP, S/MIME
【 OSs 】 Kali, NetHunter, GrapheneOS, Windows 3.1-11, macOS X-12, Ubuntu, SUSE, CentOS, ArchLinux,Cisco IOS
【 SECURITY POSTURE 】Windows Firewalls, Linux iptables, OpenVPN, Configurable DNS, Information Security Management
【 PENETRATION TESTING 】MITRE Caldera, Ethical Hacking, Metasploit, Ettercap
【 STANDARDS FAMILIAR 】ISO 27001/27002/27003/27005, NIST-800-53/122/171, GDPR, SOX / C-SOX, CCSPA, PIPEDA, ISTG-33, CPPA, FIPPA, CASL, CIS Controls,PCI DSS v4, CMMC 2.0
【 SBOMs 】SWID, CycloneDX, SPDX
【 VIRTUALIZATION 】VMWare Fusion, Parallels, PROXMOX, Kubernetes, Cloud Security
【 NETWORKING 】Samba, LTE/5G/Mesh, Tailscale

Software Development: React, Next.js, Python, TypeScript, JavaScript, Three.js / R3F, Jupyter Lab, D3.js, iOS (Objective C / Swift), C / C++ / C#, PHP, Java, .Net, SQL, WordPress, APIs ( REST / gRPC ), Computer Science, Accessibility Design, Git, Docker , ITIL, SDLC, GraphQL, Agile Methodology, CI/CD (Jenkins), Protobuf, MQTT (IoT), Scripting ( PowerShell / BASH / Ansible ), CoPilot / GPT 4 / Llama 2 / Whisper, Mobile ( [AOSP, Gerrit, LineageOS Device Builds ]& [iOS Internals, Clang/LLVM, ARMv7-A, ARMv8-A, AArch64, NEON SIMD Intrinsics] )

Business: Administrative, Marketing, Live-streaming, Google Ads, Google Analytics, Office 365 Troubleshooting, ActiveCampaign, WordPress, Constant Contact, Trello, Event Venue Setup

Design: Photoshop, 3D Studio MAX, Illustrator, Inkscape, Blender, Midjourney, DALL·E 3, ChatGPT v4

Tools: Jenkins, Elasticsearch, Kibana, Grafana, Prometheus.

Languages: English, French [Français], Czech [Čeština]

> Projects

ActiveCounterMeasures - Cyber Threat Hunting - Level 1
Sept. 2024 Six hour guided exploration course utilizing cutting edge SIEM software and techniques to detect adversaries using Cobalt Strike C2 channel tactics [Zeek, Datamash, TShark, RITA ]
DefCon Toronto (Chapter 416) Hardware Hacking Workshop (Feb. 2024)
Implemented electrical engineering fundamentals & core concepts. Acquired measurements on PCB circuits and identified UART and SPI communication protocols. Extracted & analyzed firmware to discover cybersecurity vulnerabilities. Upheld electrical lab safety protocol & ESD precautions. Identified UART and SPI communication protocols. Implemented a UART to serial adapter to initiate a hardware shell on consumer router. Analyzed and decoded live communications using a logic analyzer & sigrok. Analyzed software with OSINT techniques on IoT and hardware. Investigated by reading and interpreting component data sheets. Extracted & Analyzed firmware with industry reverse engineering software. Audited firmware files to discover cybersecurity vulnerabilities.

LHL Cybersecurity Capstone Project (Apr. 2023)

Technical Root Cause Analysis Incident Report utilizing real network evidence & artifacts.

> Awards

Hacking Health in the Community Hackathon - Google #SidewalkTO - Team: 'Here for You' (Developer) Supporting Caregivers (iOS Ambient Computing / Text Messaging) (4th Place & Biomedical Zone Mentorship)
Unearthed Mining Hackathon - Barrick Gold Sponsored - People's Choice Award - Team: 'Decelerate' (Developer) Real Time Driver Feedback (iOS Prototype IoT Sensors) ! People's Choice Award & Consultation with Sponsor
Hacking Health Toronto - Team: 'Ripple' (Developer) "Building accessible mental health literacy training and supports for under-resourced health care workplaces." Impact Award & Industry Adoption

> Activities

Project Euler (Algorithm Coding Challenge) - @kineticfocus ( 87th Percentile Ranking )
StackOverflow - @kineticfocus ( 492 reputation, 30K+ reached )
Leet Code - @peterponert ( 19/3445 challenges solved [JavaScript, TypeScript, Pandas, C++] )
VirusTotal - @kineticfocus (Research) https://www.virustotal.com/gui/user/kineticfocus

> Memberships & Volunteering

Data Connectors - Toronto Cybersecurity Conference (Oct. 2023)
ISACA Toronto Chapter - #ISACACommunITyDay Volunteer (Oct. 2023)
EdTech Leadership Summit in Toronto - Volunteer Staff (Oct. 2015)