Derek Rush, a Managing Senior Consultant, brings vast proficiency in application penetration testing and network penetration testing, both static and dynamic, to the table. With a wealth of experience, Derek has successfully performed dynamic testing for a range of high-profile clients in the healthcare, government, and logistics sectors.
His expertise is backed by a list of impressive certifications, including Certified Information Systems Security Professional (CISSP), Offensive Security Certified Professional (OSCP), Practical Web Application Penetration Testing (PWAPT), eLearnSecurity Web Application Penetration Tester (eWPT), and eLearnSecurity Certified Professional Penetration Tester (eCPPT).
Derek has presented at industry conferences such as the North Texas ISSA Cyber Security Conference and the Middle Tennessee Cyber Summit. His insights have also been shared through podcasts and written contributions to the media.
Derek holds a Bachelor of Science in Information Security from Purdue University.
May 14, 2026
Otto Support - Logging and Visibility in MCP Servers
May 13, 2026
Otto-Support - Supply Chain Risks in MCP Servers
May 08, 2026
Otto Support - The Confused Deputy
May 07, 2026
Otto Support - SSRF and Token Passthrough with MCP
May 06, 2026
Otto Support - Excessive Agency and Tool Privileges
Apr 23, 2026
Otto Support – An MCP, Agentic-AI Security Challenge
Dec 30, 2025
GenAI DevOps: More Code, More Problems
Sep 11, 2024
Exploring Large Language Models: Local LLM CTF & Lab
Feb 14, 2024
Enabling Proper PCI Testing with External Penetration Tests
Friday, March 27
Malvertising, Trusted Tools, Real-Time Attacks & Shrinking Windows
December 4, 2024
Derek Rush to Present at Cyber AI & Automation Summit
Thursday, March 21, 2024
Beyond Checkbox Compliance: Maximizing Security Value from PCI DSS Penetration Testing
Thursday, October 5, 2023 at 9 am PT / 12 pm ET
Combatting Adversaries: Proactive Social Engineering & Network Testing
On-Demand Virtual Session
Combatting Adversaries: Proactive Social Engineering & Network Testing
This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.