Senior Security Consultant
James Drew
James has spent the last 6+ years working in cyber security, helping organisations understand how attackers think and how to stay one step ahead. Having always had a keen interest in cyber security, James spent a considerable amount of time “tinkering” with various aspects of security, whether that was learning, using labs like HTB, getting involved in bug bounty schemes, or helping the team with hands-on training. James holds certifications including OSCP and CyberScheme CSTM, along with cloud security training across Microsoft, AWS, and Google platforms.
James has worked with a wide range of industries, from financial services and healthcare through to retail and tech. His projects have ranged from one-off security assessments for small teams to large-scale red team campaigns for global enterprises. James believes the best results come when complex problems are broken down into clear, actionable steps, and he enjoys sharing knowledge, simplifying the technical, and helping both security teams and non-technical readers feel more confident about the risks they face.
Connect with James
Areas of expertise
- Web and mobile app penetration testing
- Red teaming and adversary simulation
- Infrastructure assessments
- Cloud security (Microsoft 365, Azure, AWS, Google Workspace)
- Social engineering and phishing
Writing focus
James writes guides and resources that can be applied practically to secure applications and infrastructure, provide guidance on cloud configurations, and, where possible, create tools to assist. James aims to simplify complex topics and help readers take actionable steps to improve security.
James' work
-
April 24, 2026
ASP.NET Core Privilege Escalation Vulnerability (CVE-2026-40372)
Read more arrow_right_alt
-
-
February 11, 2026
BeyondTrust Remote Support and Privileged Remote Access (CVE-2026-1731)
Read more arrow_right_alt
-
January 28, 2026
Cisco Unified CM Remote Code Execution Vulnerability (CVE-2026-20045)
Read more arrow_right_alt
-
January 21, 2026
Duo Certificate Authority (CA) bundle update: Important changes coming February 2026
Read more arrow_right_alt
-
December 11, 2025
Enumerating Users and Mailboxes in Microsoft Outlook 365 Web
Read more arrow_right_alt
-
-
-
June 27, 2023
Application Security 101 – HTTP Headers Information Disclosure
Read more arrow_right_alt