Meet the Pen Testers

Threats never stop. You don’t have to face them alone.

Sean Rosado

Team Lead, Penetration Tester | CISSP, GXPN, GPEN, GWAPT, GCIA, PCIP

Sean Rosado has worked in the offensive security space since 2012. Certified with CISSP, GXPN, GPEN, GWAPT, and GCIA, he has a plethora of knowledge to share with his clients and teammates. As Lead Penetration Tester, he is responsible for delivering projects for orgs who are attempting to meet security goals through penetration testing, vulnerability assessments, cloud security assessments, and other information security-related exercises. He also enjoys working to build the next generation of security practitioners. Before joining KirkpatrickPrice, Sean performed Computer Network Defense (CND) operations for the United States Department of Defense. In this role, he assisted with monitoring and threat detection for a wide range of networks leveraged by cleared defense contractors to support global network operations for the Department of Defense. This mix of offensive and defensive security experience allows him to provide broader support to our clients as they seek to achieve their security and compliance goals.

Connect with Sean on LinkedIn!

Ready to Start Your Penetration Test?

Meet the Pen Testers

Threats never stop. You don’t have to face them alone.

Kevin Cruz

Director, Penetration Testing | GSEC, GPEN, GWAPT, GMOB, AWS CCP

Kevin Cruz is responsible for delivering information security-related services with expertise in red team infrastructure, web application, mobile application, API, social engineering, and wireless penetration testing. Kevin has worked in information security since 2013. He has a diverse background in IT ranging from a network and system administrator to an IT consultant. He holds the GSEC, GPEN, GWAPT, GMOB, AWS CCP certifications. Kevin has performed thousands of penetration tests on a wide variety of small businesses, banks, and Fortune 500 companies. He gets the most satisfaction by helping clients discover and remediate issues to ensure they are meeting their information security goals.

Connect with Kevin on LinkedIn!

Ready to Start Your Penetration Test?

Meet the Auditors

Audits are hard. Jim makes sure it’s worth it.

Jim Ryan

Senior Information Security Auditor | CISSP, SSCP, ISO 27001, ISO 42001

Jim Ryan is a Senior Information Security Auditor at KirkpatrickPrice. Jim has twenty-seven years of experience in designing and implementing information security programs, including security control selection and implementation, risk assessments, cybersecurity technology implementations, writing policies and procedures, and improving security postures.

Connect with Jim on LinkedIn!

Fun Fact

Jim is a trekkie.

Ready to Start Your Audit?

Meet the Auditors

Audits are hard. John makes sure it’s worth it.

John Burkhart

Senior Information Security Auditor | CISSP, QSA, CISA, ISO 27001/27701/42001, PMP

John Burkhart has over twenty-five years of experience in audit and IT management and holds CISA and PMP certifications. His diverse background includes serving as an IT Director for a genomics company, an IT Program Manager for a major hospital system, and a Manufacturing IT Consultant for IBM. John specializes in helping clients safeguard their information assets and ensure the effectiveness of their IT systems.

Connect with John on LinkedIn!

Fun Fact

John is an avid woodworker and furniture builder outside of his professional work. He builds custom tables and chairs, as well as handcrafted cedar and maple canoes.

Ready to Start Your Audit?

Meet the Auditors

Audits are hard. Matt makes sure it’s worth it.

Matt Johnson

Senior Information Security Auditor | CISSP, AWS CCP, MCP

As a Senior Information Security Auditor at Kirkpatrick Price, Matt leverages over 25 years of verifiable experience in cybersecurity, IT governance, risk management, and compliance to help organizations ranging from Fortune 100 companies to small businesses and city governments achieve SOC 2, ISO 27001, HIPAA, and NIST compliance. With a strong background in cybersecurity engineering and risk assessment from roles at Medtronic and other leading firms, Matt specializes in evaluating security controls, conducting audits, and ensuring regulatory compliance. His expertise includes IT security governance, encryption, policy development, and process automation, allowing him to provide strategic insights that strengthen security postures and align organizations with industry standards.

Connect with Matt on LinkedIn!