Jeremy聽Druin
Distinguished Architect, Cybersecurity at UPS
Louisville, Kentucky, United States
Summary
馃ぉ
Rockstar馃帗
Top SchoolJeremy Druin is a Distinguished Architect in Cybersecurity with 12+ years of focused experience, currently shaping security architecture and programs for a Fortune 100 company (UPS) and running a boutique security consultancy. He authored enterprise cloud and application security standards, built bug bounty and penetration testing programs, and created cloud reference architectures for AWS, Azure, and GCP, reflecting deep cross-cloud expertise reinforced by multiple GIAC and Google Cloud certifications. A veteran instructor and course author for SANS and university programs, he brings rare practitioner-to-educator fluency鈥攖ranslating adversary techniques into teachable remediation and secure development practices. Jeremy contributes to offensive security open-source tooling (notably fixes and labs for OWASP Mutillidae II) and embeds hands-on, lab-driven learning into corporate and academic curricula. Based in Louisville, he pairs academic rigor (MS in Computer Science, cybersecurity graduate certificate) with practical incident response and penetration-testing leadership across web, mobile, API, database, and network domains.
12 years of coding experience
Associate of Science - AS, Science, Associate of Science - AS, Science at Jefferson Community College, KentuckyBachelor of Science - BS, Computer Science, Bachelor of Science - BS, Computer Science at Indiana University SoutheastGraduate Certificate, Cybersecurity, Graduate Certificate, Cybersecurity at University of LouisvilleAssociate of Science - AS, Databases, GPA 4.0, Associate of Science - AS, Databases, GPA 4.0 at Indiana University-Southeast
English
Github Skills (8)
web-security10
php10
security10
documentation9
html8
xss7
cors6
phpunit4
Programming languages (9)
Github contributions (5)
webpwnized/mutillidae
Sep 2018 - Jan 2023
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:1 review, 245 commits, 22 PRs in 4 years 4 months
Contributions summary:Jeremy primarily focused on bug fixes and minor improvements to the OWASP Mutillidae II project. Their contributions involved addressing security vulnerabilities and correcting errors in PHP files, with a specific emphasis on improving the functionality of LDAP injections. They also updated and refined various aspects of the documentation. In addition, the user enhanced the project by incorporating new video tutorials.
bugbountyctfweb-applicationtrainingweb-hacking
webpwnized/gcp-audit
Jan 2022 - Nov 2022
GCP Audit checks projects in Google Cloud for compliance with CIS Benchmarks
Contributions:9 reviews, 86 commits, 28 PRs in 10 months
auditbenchmarkcloudcybersecuritygoogle
Find and Hire Top DevelopersWe鈥檝e analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.