Deputy Program Manager (Defensive Cyber Operations)
As a Deputy Program Manager and Senior Software Developer, Paul Ewing provides technical leadership in the design, development, and maintenance of multiple enterprise-level capabilities used by a DoD Cybersecurity Service Provider (CSSP) to protect unclassified and classified networks. Paul focuses on optimizing agile development environments for continuous integration / continuous delivery (CI/CD) to meet mission priorities at the speed of relevance. Paul contributes expertise in the development and maintenance of infrastructure as code (IaC) to rapidly deliver capabilities to DoD clients. Paul applies modern software engineering principles within development security operations (DevSecOps) Teams to break down silos, maximize transparency, and embrace automation.
Prior to joining BreakPoint Labs, Paul led a Software Engineering Team in the design, development, and testing of host security scanners with a focus on evaluating security controls in Unix/Linux systems. Paul also served as the lead developer for an Information Security Continuous Monitoring (ISCM) capability, which correlated and analyzed various cybersecurity data sets to accurately monitor the security state of thousands of endpoints.
Paul earned a Bachelor of Science degree in Physics from the University of Minnesota and holds a CISSP certification.
Technical Director / Red Team Operator (Cyber Red Team & Threat Emulation)
As a Technical Director and Red Team Operator, Ray Blasko leads assessment engagements – red teaming, penetration testing, and vulnerability assessments – across commercial enterprise networks and provides direct support to a DoD Cyber Red Team. In conducting in-depth assessments, Ray provides clients with unique insights into their cyber risk posture from various perspectives, including external, internal, web, wireless, physical, and social engineering. Ray is always current with the latest cybersecurity threats and emerging vulnerabilities, and their applicability to the technologies within client networks. Ray is a recognized expert in evading endpoint detection and response tools and developing realistic attack scenarios based on the ‘real-world’ cyber threats facing an organization.
Prior to BreakPoint Labs, Ray worked as a freelance developer creating specialized applications to simulate and analyze NBA and NFL games for sports prediction industries. In doing so, Ray applied a wide variety of technical skills with programming languages and tools, including machine learning, cloud technologies, front-end and back-end development, database management, and more.
Ray has a Bachelor of Science in Business Management and is working on a Master of Science degree in Management of Technology from New York University. Ray also holds numerous professional certifications, including OSCP, OSWP, GICSP, GAWN, CEH, Security+, Dragos Assessing Hunting & Monitoring Industrial Control System Networks, Red Team Alliance Covert Methods of Entry, Pentester Academy Certified Red Team Professional, and k>fivefour Red Team Journeyman.
Senior Offensive Security Engineer (Cyber Red Team & Threat Emulation)
As a Senior Offensive Security Engineer, Luke Hudson applies deep technical expertise and understanding of adversarial tactics, techniques, and procedures (TTPs) to effectively assess client networks and systems of National Security importance. Luke leads the full lifecycle of Red Team engagements from establishing rules of engagement (ROE), conducting preparation and tooling activities, accurately emulating adversary threats, and producing high-quality post-assessment reporting, including technical reports, leadership out-briefs, and after-action reporting. Luke is an expert in techniques to bypass anti-virus (AV) / endpoint detection and response (EDR), as well as payload development.
Prior to BreakPoint Labs, Luke served as a Web Application Penetration Tester performing security assessments through the creation of custom scripts to identify potentially high-impact risks to key cyber terrain.
Luke has a Bachelor of Science degree in cyber security from the University of Maryland Global Campus and holds numerous professional certifications, including OSCE, OSCP, OSWP, CISSP, GICSP, GPEN, OSWP, GPEN, GCFA, and CEH