Tim Tomes
Director Of Training And Programs at OnDefend
Duncan, South Carolina, United States
Summary
🤩
Rockstar🎓
Top SchoolTim Tomes is an application security leader and trainer with 13 years of experience spanning software development, red teaming, and secure SDLC practice, informed by nearly a decade as a US Army officer. As Founder of Practical Security Services and current Director of Training and Programs at OnDefend, he blends hands-on web application penetration testing with curriculum design and mentorship for both military and commercial audiences. He has led training programs at nVisium and delivered consulting at firms like Black Hills Information Security and Accuvant, demonstrating an ability to translate complex adversary techniques into practical defensive guidance. An active open-source contributor, his enhancements to the recon-ng reconnaissance framework improved API key management, request handling, and database tooling—showing a knack for pragmatic backend improvements that accelerate intelligence gathering. Based in Duncan, South Carolina, he pairs a BBA in MIS with an operator’s mindset to help organizations build more secure software and measurable security programs.
13 years of coding experience
3 years of employment as a software developer
Bachelor of Business Administration (BBA), Management Information Systems, General, Bachelor of Business Administration (BBA), Management Information Systems, General at University of Toledo
Github Skills (10)
database-management10
httpwebrequest10
api10
sql10
python10
apidoc10
request-handler10
webrequest10
http-request10
web-framework9
Programming languages (7)
Github contributions (5)
lanmaster53/recon-ng
Oct 2019 - Aug 2021
Open Source Intelligence gathering tool aimed at reducing the time spent harvesting information from open sources.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:2 reviews, 23 commits, 24 PRs in 1 year 10 months
Contributions summary:Tim's contributions focused on improving the request helper function with the addition of a custom response object, and they also introduced a complete system for managing API keys. The user implemented several convenience methods, enhanced the ability to create database tables, and improved database query functionality. Additionally, the user added functionalities by refactoring to use an external library for the parsing of API requests and a new method to handle HTTP requests.
information-gatheringpythongatheringharvestingintelligence-gathering
lanmaster53/cef
Aug 2018 - Sep 2019
Contributions:15 commits, 2 pushes, 1 branch in 1 year
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.