Resumé

Trent Clostio

Senior Security Engineer

• twclostio@gmail.com
• LinkedIn
• GitHub

About Me

Senior Security Engineer and offensive security practitioner with over 10 years of experience in securing enterprise cloud environments and high-scale SaaS applications. I specialize in bridging the gap between offensive exploits and defensive engineering mitigations.

Experience

Senior Security Engineer

DAT Freight & Analytics | February 2026 – Current

• Architected security policies and implemented controls across multiple products underpinning complex SaaS lines of business.
• Automated static and dynamic security scanning, increasing pipeline coverage from ~20% to over 90%.
• Leveraged offensive security expertise for threat hunting and fraud investigation.
• Provided security guidance and reviewed cloud architecture designs across organizational units.

Lead Security Engineer

Bureau Veritas Cybersecurity | August 2020 – February 2026

• Served as an ethical hacker and engineering manager for a multi-disciplinary security services team.
• Led complex penetration testing engagements, including attack surface analysis, cloud security assessments, and mobile reverse-engineering.
• Discovered vulnerabilities (RCE, Auth Bypass) in assets serving millions of users, resolving significant security debt.
• Managed and mentored a team of security engineers to standardize methodologies and increase efficiency.

Application Security Engineer

Torrent Technologies, Inc | November 2019 – August 2020

• Reduced critical and high-severity vulnerability backlogs by over 50%.
• Performed static and dynamic analysis of production code and conducted internal penetration tests.

Software Engineer

Torrent Technologies, Inc | March 2019 – November 2019

• Platform engineer for a SaaS application utilizing AWS core services, Azure DevOps, and ASP.NET.

Core Skills & Proficiencies

Primary Skill: Persistence.

• Security: Cloud architecture review, SRE, SAST/DAST, Red team operations, and OSINT.
• Tools: AI agents (Claude, Gemini), Nmap, Burp Suite, Semgrep, Sliver C2, Ghidra, and AWS/GCP services.
• Languages: Primarily Python and Go; proficient in reviewing Java, JS, C/C++, C#, and PHP.

Education & Certifications

• AWS Certified Security – Specialty (SCS-C02)
• Gonzaga University: Studied Information Systems and Economics (2011-2016)

Projects & Interests

• JiraC2: A proof-of-concept C2 leveraging Jira public APIs as its transport layer.
• Interests: Avid outdoorsman who enjoys skiing, fishing, and mountaineering.