About Me

Hello, I’m Josh Tomkiel

I’m a Managing Director on the Penetration Testing Team at Schellman, based in the Greater Philadelphia area. With over a decade of experience in information security, I lead our mobile penetration testing activities, phishing program, and Red Team service offering.

What I Do

I have a deep background in all facets of penetration testing and work closely with Schellman’s service lines to ensure clients’ security assessment needs are met. Having been a penetration tester myself, I understand what it takes to deliver a successful assessment.

Areas of Focus:

• Mobile Application Penetration Testing
• Red Team Operations
• Phishing & Social Engineering Assessments
• Internal & External Network Penetration Testing

Certifications

• OSCP - Offensive Security Certified Professional
• OSCE - Offensive Security Certified Expert

Background

Prior to my current role, I held positions at Barclaycard UK and Montgomery County Community College, building the foundation for my career in offensive security.

Connect

This blog hosts my writeups and research on topics in information security. For my professional articles on penetration testing best practices, visit my Publications page.

The best way to reach me is via Twitter/X or LinkedIn.

Thanks for stopping by!