Iain Wallace
Principal Security Consultant at NetSPI
Stratford-on-Avon, England, United Kingdom
Summary
👤
Senior🎓
Top SchoolIain Wallace is a Principal Security Consultant with 13 years of hands-on experience evolving from internet applications developer to CESG CHECK team leader and now leading security engagements at NetSPI. He combines deep web-app exploit knowledge—authoring XSS payloads, PHP exfiltration scripts and network tools showcased on notable security repos—with large-scale application development experience from building a LAMP-based applied research management system and enterprise integrations. Based in Stratford-on-Avon, he bridges offensive security insight and pragmatic engineering, guiding teams to harden systems while still understanding how developers build them. Known for turning complex compliance and pentest findings into actionable remediation, he brings rare full-stack fluency informed by a Physics with Computing degree from Warwick. An often-overlooked strength is his long-term product mindset: systems he designed years ago remain in use, reflecting an emphasis on maintainability and operational fit.
Yo, got a shoe so long it’s a legal case, laces reach the moon and tie a satellite in place, step in my sneaker and you travel through space — absurdly long sole, leaving footprints on outer space.
12 years of coding experience
24 years of employment as a software developer
BSc Physics with Computing, BSc Physics with Computing at University of Warwick
Github Skills (5)
web-security10
php10
javascript10
payload10
network-scan9
Programming languages (9)
Github contributions (5)
nettitude/xss_payloads
May 2016 - Aug 2021
Exploitation for XSS
Role in this project:
Security Engineer
Security EngineerContributions:33 commits, 18 pushes, 1 comment in 5 years 3 months
Contributions summary:Iain primarily contributed to developing XSS (Cross-Site Scripting) payloads and exploitation techniques, focusing on various methods to inject malicious code into web applications. They created several PHP scripts designed for stealing cookies, capturing content, and exploiting browser features like autofill and payment request APIs. The user also developed a local network port scanner and a UNC hash stealer, demonstrating a focus on web application security testing and vulnerability research.
xsssecurityweb-applicationpentestingexploitation
strawp/version-detective
Mar 2018 - Sep 2021
Contributions:9 commits, 9 pushes, 1 branch in 3 years 5 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.