Jason Haddix is a Security Engineer and Penetration Tester for HP's Application Security Team and a Security Blogger at http://www.securityaegis.com. Jason has been working in information technology for many years doing everything from admin work, component bench technician, and identity theft researcher. He has been a lead on projects in the Fortune 100 space including companies such as Comcast and has experience with numerous infrastructure and web application security assessment projects. Jason actively participates in research and discussions regarding (E)hacking, Social Engineering, the security-con community, et cetera. Jason's current projects include numerous reviews of current pen-testing and incident handling teaching curriculum as well as being a creator/contributor/columnist to SecurityAegis.com, PentesterScripting.com, Ethicalhacker.net, and Hakin9 magazine. He also serves on the advisory board for all GIAC Penetration Testing curriculum as well is GSEC, GPEN, and eCPPT certified.