Nic P. Jones

/ Profile

Name
Nicholas (Nic) Jones
Alias
NicPWNs
Occupation
Hacker
Location
Washington, D.C.
Status
Active
Email
nic@nicpjones.com
GitHub
@NicPWNs
LinkedIn
in/NicPJones

Summary

Hands-on security engineer and published vulnerability researcher with 7+ years across offensive security, AWS and Azure cloud network security, and enterprise security. Lead T-Rex's information security program and a network security team for the U.S. Department of Education. Currently completing an M.S. in Information Security Engineering at SANS and expanding into AI red teaming through CTF competitions and projects.

01

Work

T-Rex Solutions, LLC

Bethesda, MD - Remote

Jun 2019 — Present

Information Security Manager
Jan 2024 — Present
  • —Lead T-Rex's information security program, including strategy and security architecture
  • —Led successful ISO 27001, NIST SP 800-171, and CMMC audits
  • —Rolled out EDR, SIEM, and zero trust architecture across the T-Rex enterprise
  • —Overhauled the vulnerability management program and established program metrics
  • —Conduct incident response and run tabletop exercises with executives
  • —Built an internal AI-powered SCORM course builder for company-wide security awareness training
  • —Lead AI adoption for IT & Security, developing AI tools and reporting progress to company leadership
Cybersecurity Engineer
May 2020 — Dec 2023
  • —Conducted periodic penetration tests, managed network infrastructure, and developed incident response exercises
  • —Led MITRE ATT&CK adoption and ISO 27001 preparation, and managed the information security intern
Cybersecurity Analyst
Aug 2019 — May 2020
  • —Led malicious email analysis and vulnerability & patch management
  • —Performed cloud security architecture, security awareness training, and network monitoring
Cybersecurity Intern
Jun 2019 — Aug 2019
  • —Re-architected the SIEM platform for security event logging and detection
  • —Supported Splunk implementation and the development of security procedures, policies, compliance, and training

U.S. Department of Education

Washington, D.C. - Remote

Sep 2024 — Present

Network Security Manager
Apr 2025 — Present
  • —Manage a 5-person network and security team on the Department's cloud hosting contract
  • —Led TIC 3.0 implementation and a full redesign of the AWS and Azure cloud networks
  • —Secure traffic with Palo Alto VM-Series firewalls and public endpoints with AWS WAF, CloudFront, and Azure Front Door
Cloud Engineer
Sep 2024 — Apr 2025
  • —Hands-on engineer on the team that migrated 20+ systems from a legacy hosting platform to AWS in 3 months

Palantir Technologies

Washington, D.C. - Remote

Jun 2022 — Dec 2023

Data Engineer
Jun 2022 — Dec 2023
  • —Built Palantir Foundry data pipelines for the Department of Energy's National Nuclear Security Administration (NNSA)
  • —Developed ETL in Python, PySpark, and TypeScript to ingest, clean, and normalize critical government data

Synack Red Team

Freelance

May 2022 — Aug 2024

Security Researcher
May 2022 — Aug 2024
  • —Tested web, host, and mobile targets and reported security vulnerabilities for Synack's clients
  • —Selected for Synack's vetted researcher program through technical assessments and interviews

Mobius Intelligent Systems

Laurel, MD - Remote

May 2019 — Sep 2019

Applications Tester & Developer
May 2019 — Sep 2019
  • —Tested and assisted in developing JavaScript, PHP, MySQL, and Python business intelligence applications for customers

Capitol Technology University Cyber Lab

Laurel, MD

Mar 2019 — Sep 2019

SOC Analyst/Engineer
Mar 2019 — Sep 2019
  • —Managed and developed the Cyber Lab's Security Operations Center (SOC) to keep the lab network secure
  • —Fostered a hands-on learning environment for other students
  • —Created Splunk rules and dashboards for analysis

ADNET Systems, Inc.

NASA GSFC, Greenbelt, MD

Dec 2018 — May 2019

Data Technician
Dec 2018 — May 2019
  • —Managed CentOS and macOS systems and their logs to support heliophysics satellite missions (SDO, SOHO, STEREO)

CSRA, Inc.

Falls Church, VA

Dec 2017 — Jan 2018

IT Intern
Dec 2017 — Jan 2018
  • —Managed documents and IT resources to assist the government contract effort
  • —Imaged and prepped Windows 10 systems and Android phones for deployment
02

Education

SANS Technology Institute

Oct 2024 — Present

Master of Science, Information Security Engineering · GPA 4.0

  • Dean's List
  • National Cyber League (NCL) Scholarship Winner (Fall 2024 & Spring 2025)

Wilmington University

Aug 2021 — Aug 2023

Master of Science, Cybersecurity · GPA 4.0

  • Dean's List
  • Epsilon Pi Tau Honor Society

Capitol Technology University

Aug 2016 — May 2020

Bachelor of Science, Cyber & Information Security · GPA 3.8

  • Dean's List
  • Magna Cum Laude
  • Upsilon Pi Epsilon Honor Society

Sussex Technical High School

Aug 2012 — May 2016

Certificate, Electronics/Computer Information Systems Engineering · GPA 3.8

  • Key Club
  • HAM Radio
  • SkillsUSA
03

Certifications