Trevor Eckhart

Full-Stack Software Engineer · Security Researcher

Connecticut, USA me@trevoreckhart.com trevoreckhart.com linkedin.com/in/trevoreckhart github.com/TrevE credly.com/users/trevoreckhart

Summary

Trevor writes software for a living and takes it apart when something smells off. He started at a Staples repair bench in 2003, doing spyware removal back when worms like Blaster and Sasser were tearing through Windows PCs. Then he spent six years running the network and servers at Intergis, and he has built apps at Verizon since 2011. Along the way he exposed Carrier IQ and found CVE-2011-3975 in HTC's phones. In 2020 he used public records to show a police drone flying over a protest. His certifications run all the way from CompTIA PenTest+ to EPA 608 Universal for HVAC work.

Experience

Full-Stack Software Engineer, App Development, Verizon2011 - present

  • Builds and secures web and mobile applications in .NET, Java, JavaScript/TypeScript, Node.js and Android.
  • Integrates generative AI into product workflows.
  • Uses Wireshark and Fiddler for traffic analysis and debugging.

Systems Administrator, Intergis LLC2005 - 2011

  • Built point-to-point IPSec VPNs between business locations on SonicWall, pfSense and m0n0wall.
  • Ran Windows Server 2003/2008, Active Directory and about 300 workstations.
  • Kept a load-balanced Citrix environment running for more than 900 users and helped run a high-availability VMware ESX farm of more than 100 virtual machines.
  • DBA for several Microsoft SQL Server databases over 500 GB each. Also ran Exchange 2007 and Veritas Backup Exec.
  • Received the company's 2009 Achievement Award for Outstanding Performance.

Computer Tech / Sales Associate, Staples2003 - 2005

  • Certified in-store technician doing hardware and software repair plus virus and malware removal.

Security research

Carrier IQ (Mobile privacy · reverse engineering)Nov - Dec 2011

Carrier IQ was hiding on millions of phones. He took it apart and showed everyone what it could see. Evidence: Research report, Part 1.

HTC Loggers (CVE-2011-3975)Sep - Oct 2011

An HTC update let any app with internet access pull your location, phone numbers and texts out of a hidden logger. Evidence: Video: Android Security Elevation With HTCLoggers.apk.

Police Drones Flown Irresponsibly over Protest (Surveillance oversight · public records)2020

He used public records and raw DJI flight logs to show a police drone flew over a protest, and an FAA inspector called the flight path somewhat careless. Evidence: Surveillance records overview.

Certifications

  • CompTIA PenTest+ ce 2025
  • CompTIA CySA+ ce 2022
  • CompTIA Security+ ce 2021
  • CompTIA Network Vulnerability Assessment Professional (CNVP) 2025
  • CompTIA Network Security Professional (CNSP) 2025
  • AWS Certified AI Practitioner 2026
  • Google Cloud Generative AI Leader 2026
  • CompTIA Network+ ce 2022
  • CompTIA A+ ce 2021
  • FCC Amateur Radio Technician, KC1BLY 2014
  • EPA Section 608 Universal Certification 2025
  • NATE Ready To Work 2025
  • OSHA 10-Hour Construction 2025

Plus 36 more, each with a verification link, at trevoreckhart.com/#clearances. 75 Credly badges.

Education and training

Tunxis Community College: Computer Information Systems, Network Administration option, including Network Essentials I, Network Security Fundamentals and Programming Logic2005 - 2006

Study.com (ACE credit): CS 105 Intro to Operating Systems, CS 204 Database Programming, CS 303 Database Management, CS 305 Operating Systems, CS 331 Cybersecurity Risk Analysis2026

Sophia Learning (ACE credit): 26 courses, including Intro to IT, Relational Databases, Python, Business Law, Statistics and Calculus I2026

Coursera: Cloud computing, cybersecurity careers, Google AI and full-stack web development (React, Node and Express, Git)2026

TEEX (DHS/FEMA funded): AWR cyber courses, including Digital Forensics Basics and Cyber Incident Management2014, 2026

FEMA Emergency Management Institute: IS-100.b, IS-200.b, IS-700.a and IS-800.b2014

Skills

Software engineering: Java, TypeScript, JavaScript, Node.js, .NET (C#, VB.NET), Android, Angular, ExtJS, React

Security: Application and network penetration testing, vulnerability research, reverse engineering, traffic analysis (Wireshark, Fiddler), cryptography, privacy advocacy

AI: Generative AI implementation and integration, Google Cloud Generative AI Leader, AWS Certified AI Practitioner

Data and platforms: MS SQL Server, Postgres, Snowflake, MongoDB, Windows Server, Hyper-V, VMware, Citrix, Linux (Debian, Red Hat, FreeBSD), AWS, Google Cloud

Networking: Site-to-site IPSec VPNs, SonicWall, pfSense, m0n0wall, Active Directory, Exchange

Physical systems: Data center thermal management (EPA 608/609, NATE), electrical and HVAC systems integration

Selected press

NPR, The Washington Post, CNN, Wired, BBC News, NBC News, ABC News, Fox News, Forbes, HuffPost, TechCrunch, Ars Technica, The Verge, CNET, Engadget, The Register. Full list with links at trevoreckhart.com/#press.