Dylan Shroll

Cybersecurity and Adversary Engagement

My Story

Over the past 8 years I've gone from building applications for a coffee repair business as a side gig while fixing espresso machines to working as a full-time Security Engineer with Revology and as a passionate researcher into the practical applications of cybersecurity technologies. Along the way I've had the privilege to build security programs at some amazing organizations, reducing risk and improving security posture in a myriad of ways.

I am also a board member for the Des Moines Queer Youth Resource Center, an organization borne of that same desire for community I felt as a young queer person. Together we put on the absolute best event I've been involved in, the Safe Space Prom, where queer young people from across the region can come together in a safe, supportive, and fun environment to celebrate themselves and their community.

Passion Projects

Application Security

I’ve been working in application security on-and-off for the duration of my career. I’ve designed and implemented application security programs for everything from legacy .Net applications to cloud-native Python and JS applications. I’ve worked through dynamic and static testing regimens, change management procedures, and code reviews, all resulting in a more secure, value-driven application process.

Lies, Lures, and LLM’s

Beginning in 2021, I’ve been researching the potential applications of large language models on cyber-deception operations. Having realized the ability of LLM’s to automate deception operations targeting the recon phase of the Cyber Kill Chain, I’ve designed and implemented a fine-tuned model that delivers higher fidelity simulacra and personas. These personas were able to engage with targets semi-autonomously, allowing over 100 adversary accounts to be identified and turned over to platforms for violating TOS.

QYRC.org

As a board member for the Des Moines, Iowa, Queer Youth Resource Center, I’ve been fortunate enough to contribute to the digital infrastructure of the organization, most notably putting together a website, centralizing communications management, and facilitating growth. Keep in touch with us at qyrc.org, we’ve got some amazing events we’re planning for this year!

Interests

Adversary Engagement
Application Security
Cyber Deception
House Plants
LangChain
LangGraph
Operations Management
Python
Threat Hunting
XDR

Where to Find Me