Karl Fosaaen
Vice President Research at NetSPI
Portland, Oregon Metropolitan Area United States
Summary
🤩
Rockstar🎓
Top SchoolKarl Fosaaen is a cybersecurity research leader with 13 years of experience, currently serving as Vice President Research at NetSPI in the Portland area. He rose through technical and management ranks at NetSPI—from hands-on penetration tester to practice director and senior leadership—bringing deep expertise in Azure security assessments and offensive tooling. Karl contributes to open-source security tooling (notably enhancing NetSPI’s MicroBurst PowerShell scripts for Azure credential and resource enumeration), combining practical red-team skills with research-driven innovation. Known for translating complex attack techniques into reproducible assessment capabilities, he balances technical rigor with strategic program leadership.
13 years of coding experience
10 years of employment as a software developer
BS, Computer Science, BS, Computer Science at University of Minnesota
Github Skills (8)
powershell10
azure-powershell10
cloud-security10
vault10
azure-keyvault10
api-management8
servicebus7
k8s6
Programming languages (4)
Github contributions (5)
NetSPI/MicroBurst
Jul 2018 - Jan 2023
A collection of scripts for assessing Microsoft Azure security
Role in this project:
Security Engineer
Security EngineerContributions:16 reviews, 117 commits, 25 PRs in 4 years 7 months
Contributions summary:Karl primarily contributes to security assessment scripts for Microsoft Azure, based on the "netspi/microburst" repository description. The commits show the addition and enhancement of PowerShell scripts designed to enumerate Azure resources, including blobs, subdomains, and credentials. The user’s work also involves expanding the tool's capabilities with new features like functions to extract secrets and information, contributing to the project's overall goal of assessing Azure security.
securitymicrosoft-azuremicrosoftazureazure-security
kfosaaen/Get-LAPSPasswords
May 2015 - Dec 2019
Powershell function to pull the local admin passwords from LDAP, stored there by LAPS.
Contributions:7 commits, 1 PR, 6 pushes in 4 years 8 months
passwordsstoredadminpowershellactivedirectory
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.