MAXIMUS FARTHING
Bristol, UK | [email protected]
download meProfessional Profile
Senior Security Consultant with broad offensive security expertise across application, infrastructure, cloud, mobile, phishing, and threat-led security engagements. Proven track record leading complex assessments end-to-end, improving delivery standards, mentoring consultants, and designing scalable testing methodologies. Strong client-facing capability with deep technical execution across enterprise environments.
Skills
Technical
- Red team operations and adversary simulation
- Assumed-breach and internal infrastructure testing
- External infrastructure, service and protocol assessment
- Active Directory enumeration, attack path analysis and abuse
- Windows and Linux privilege escalation
- Web application and API security assessment
- Azure, AWS, Kube, GCP and Microsoft 365 security assessment
- Phishing infrastructure, reverse proxying and payload delivery
- Command-and-control tradecraft and post-exploitation
- Exploit validation, adaptation and vulnerability chaining
- OSINT and targeted reconnaissance
Non-Technical
- Team leadership, coordination and technical oversight
- Line management, mentoring and staff development
- Engagement scoping, planning and delivery ownership
- Clear written and verbal communication
- Client-ready reporting and quality assurance
- Client briefings and post-engagement walkthroughs
- Mentoring and capability development within teams
- Process design, documentation and standardisation
- Creation and refinement of security service offerings
- Research-driven improvement of testing approaches
- Working knowledge of NIST, ISO 27001, and CIS Control
Professional Experience
Technical lead across offensive security engagements spanning applications, infrastructure, cloud, mobile, phishing and threat-led testing. Rebuilt reporting, QA and engagement-scoping processes, introduced improved delivery methodologies, and developed advanced security offerings.
Delivered offensive security engagements and client-facing technical reporting across enterprise environments.
Performed security consultancy engagements with emphasis on technical testing, reporting and remediation guidance.
Education & Training
- Altered Security – Azure Red Team
- Altered Security – Pen-testing Azure
- Zero Point Security – Red Team Ops (CRTO I)
- Offensive Security - OSCP
- Hack The Box – Advanced AD & Network Exploitation (Dante)
- Crest CPSA (Expired)
- Microsoft – Cloud & Identity Fundamentals (AZ-104)