ABOUT THE AUTHOR
Red Team & AI Security
8 years of red team experience across enterprise identity, cloud environments and AI systems.
My expertise spans Active Directory and domain controller security, lateral movement in cloud and hybrid-cloud environments, large language models and their infrastructure, agent security and AI guardrails.
xiaohei@xiaohei.coExpertise
- Active Directory & domain security
- Expertise in AD and domain controller security. Strong understanding of domains, domain trees, forests and their trust relationships.
- Cloud & hybrid-cloud security
- Expertise in lateral movement across AWS, Azure, GCP and hybrid-cloud environments, with a focus on identity, permissions and cross-environment trust.
- LLM & infrastructure security
- Expertise in large language model security and the infrastructure supporting model execution, viewed as one connected system.
- Agent security & AI guardrails
- Expertise in agent security and AI guardrails, including trust boundaries between model output, tool use and actions in connected systems.
Adversarial experience
High-intensity adversarial engagements with AWS, Azure and GCP security expert teams, supported by 8 years of red team experience.
Certifications
OffSecOffSec Certified Professional (OSCP)OSCP 
OffSecOffSec Experienced Penetration Tester (OSEP)OSEP 
OffSecOffSec AI Red Teamer (OSAI)OSAI 
Google CloudGoogle Cloud Certified — Professional Machine Learning EngineerProfessional 
Amazon Web ServicesAWS Certified Generative AI Developer — ProfessionalAIP-C01 
MicrosoftMicrosoft Certified: Multi-Agent AI Solutions ExpertAI-500 
FortinetFortinet Network Security Expert 8 — Cybersecurity ExpertNSE 8 
AnthropicClaude Certified Architect: ProfessionalProfessional
Get in touch
I’m currently looking for opportunities in red teaming, cloud security, and AI or agent security.
xiaohei@xiaohei.co