Nathan Acks

Led penetration tests across web applications, mobile applications, and network infrastructure, including cloud architecture and AWS account configuration reviews.

Performed source code review across large multi-repository codebases.

Wrote client-facing deliverables including architecture and configuration review reports.

Developed and led multi-day security trainings for client software development teams, delivered on-site in the US and Europe.

Led teams of 1 - 4 engineers during multi-week engagements covering multiple services and applications.

Coordinated scoping calls and process improvements as a technical project manager for a major global client.

Developed in-house tools to aid penetration test automation and effectiveness.

Notable achievements include:

• Developed a standardized testing environment using Nix flakes.

• Maintained an offline knowledge base for use by engineers during on-site engagements without direct internet access.

Performed security reviews and penetration tests of web applications, thick clients, and mobile applications as part of an application security team.

Created threat models that resulted in more secure application design.

Wrote client-facing deliverables including penetration test reports.

Analyzed and presented results of testing to team members, managers, and customers.

Founded and oversaw the IT & Security team, which grew from one to two, crafting organization-wide security policies, documentation, and trainings with the Legal team and the President's Office.

Held bottom-line responsibility for the roll-out, maintenance, security, and support of IT systems used by 150 - 200 staff (up to 500 in summer), including email, authentication, document management, and custom internal applications.

Served as the technical point-of-contact for PCI DSS issues.

Investigated and remediated potential IT security incidents.

Notable achievements include:

• Oversaw the creation of an internal account lifecycle system covering Okta, Google Workspace, Microsoft 365, and Zoom, including just-in-time Zoom provisioning driven by shared calendar bookings.

• Oversaw migrations from a legacy vendor email system to Google Workspace and from legacy LDAP to Okta.

• Managed the roll-out of two-factor authentication to all staff and the migration of office phones to Zoom Phone.

Provided data analysis, database development, and IT vendor management for the organization's digital organizing program.

Managed up to five Linux servers running mission-critical applications including LDAP/GOsa, MySQL, NFS, Postfix, Apache, CiviCRM, WebGUI, and Tenable Security Center.

Maintained a library of dozens of custom SQL and PL/SQL scripts for reporting and data import, export, and clean-up.

Participated in outreach strategy development and helped write content for email campaigns and web pages, including rapid responses to breaking political stories.

Notable achievements include:

• Oversaw the migrations of an in-house constituent relationship management (CRM) and action system to a vendor CRM (Convio, and later Salsa).

• Led a project that integrated vendor CRM databases with a separate system hosted by ROI Solutions.

Maintained a static website for the organization using Quartz, GitHub Actions, and Netlify.

Wrote and maintained organization-specific Discord bots hosted using exe.dev.

Helped design and implement externally-facing project pages.

Part of the core team responsible for managing the organizational treasury using Gnosis Safe.