Download PDF Resume

Jenn Shagrin

Independent Security Researcher
Albuquerque, NM | jennshagrin@proton.me
linkedin.com/in/jenn-shagrin | github.com/jennshaggy | Portfolio: jennshaggy.github.io

Focus

I work in offensive security: penetration testing, independent vulnerability research, and AI security. I test systems, follow attack paths, reverse binaries, build security tools, analyze forensic evidence, write detections, and thoroughly enjoy what I do.

Selected Research

Independent Security Researcher | 2026-Present
Independent | Authorized Coordinated Disclosure

Privileged Credential Exposure Through an Authorization Chain
Intigriti submission | 2026

  • Identified an authorization-chain flaw that let a read-only administrative account export hidden privileged-account authentication material and retrieve the root-owned export over FTPS.
  • Verified each stage through role comparison, Argon2id format analysis, permission review, controlled retrieval, and matching SHA-256 hashes.
  • Submitted one high-severity report to the program; a second report documenting the complete chain is saved in Intigriti pending triage of the first.

Active Directory Attack-Chain Portfolio
Kerberos | AD CS | BloodHound

  • Executed and documented Kerberoasting, BloodHound path analysis, targetedKerberoast.py, remote execution, and ESC1 certificate abuse across Operation Endgame and Ledger.

Cyber Apocalypse 2026 Portfolio
Web Exploitation | Reverse Engineering | AI/ML Security

  • Recovered a custom four-byte VM from a stripped ARM64 binary, then wrote a Python disassembler, emulator, and inverse solver that reproduced the accepted input through forward execution.
  • Chained web, service, and model flaws across Signetry, Archonyx, and Assay, including stored client-side execution, unsafe ZIP extraction, Java deserialization, race-condition abuse, model extraction, evasion, and backdoor recovery.

Hayabusa MCP and CyberStrike Harness
Python | MCP | EVTX | Fedora Linux

  • Shipped a security-hardened Hayabusa MCP server and evidence-controlled agentic security harness; verified genuine MCP orchestration, passed 312 tests and Ruff checks, and completed reproducible forensic analysis with evidence provenance.

Technical Range

Offensive security: Web application and API testing, Active Directory attack paths, privilege escalation, reverse engineering, LLM red-teaming, OSINT, post-exploitation, and technical reporting

Tools and development: Python, Go, Bash, Java, Burp Suite, BloodHound, Impacket, Nessus, Ghidra, Wireshark, Hayabusa, Git, GitHub Actions, Ruff, and pytest

Detection and analysis: Sysmon, Windows EVTX, Splunk, Elastic, packet analysis, malware triage, DFIR, cloud audit logs, identity-focused investigation, and detection engineering

Platforms and frameworks: Windows, Linux, Active Directory, Proxmox, AWS, Azure, Microsoft 365, MCP, MITRE ATT&CK, MITRE ATLAS, OWASP Top 10, and OWASP LLM Top 10

Security Tooling

organAIzedcrime
Go | AI/ML Security | MITRE ATLAS

  • Built a Go CLI mapping adversarial AI techniques, tools, and validated payloads to MITRE ATLAS, with HTTP and Ollama execution modes plus cross-platform releases.

aismon
Python | Sysmon | Detection Engineering

  • Built a Python detector for AI-related Windows Sysmon Event ID 1 activity using 35 YAML rules, secure XML parsing, API-key redaction, schema validation, false-positive coverage, and 69 passing tests.

Professional Foundation

Head of IT / System Administration | 2022-2024
Invasion Group & Righteous Babe Records

  • Managed and hardened multi-site infrastructure across web platforms, endpoints, identity and access, payroll, content delivery, vendors, and user support.

Independent Technology Consulting | 2005-Present
Selected Engagements

  • Supported business technology for 20+ years across devices, accounts, hosting, DNS and firewalls, backups, Google Workspace, Microsoft 365, and mixed-network troubleshooting.

Online Booking Department Developer and Administrator | Feb 2009-Jan 2011
Starving Students

  • Developed and administered the company's first online chat and booking platform, then managed a five-person online leads department covering workflow standards, lead routing, and daily operations.

Community

Vice President, Cybersecurity Club | 2026-Present
California Institute of Applied Technology

  • Co-founded the weekly Beginners CTF and co-led sessions with a CEH instructor, advising participants through challenges including TryHackMe's ContAInment AI-security room.

Co-Founder | 2021-Present
Crumpled Thoughts, 501(c)(3)

  • Provide technology and operational oversight for literacy, technology education, cybersecurity, and digital-safety programs in New Mexico and Virginia.

Credentials

TCM Security: PNPT - In Progress

CompTIA: Security+ ce, Network+ ce, and A+ ce

Additional: ISC2 CC; AWS Academy Cloud Foundations; EC-Council ADG Verified in Defend

TryHackMe: Top 1% globally | Legend | jenn_notabot

Education

A.A.S., Computer Information Systems, Cybersecurity | Summa Cum Laude | Completed Jul 2026
California Institute of Applied Technology | GPA: 4.0

Applied Bachelor's Degree, Computer Information Systems | Expected Mar 2028
California Institute of Applied Technology | Cybersecurity Concentration | Begins Sep 2026