Jayson E. Street

Background

Jayson E. Street is an American information security consultant who has worked for more than two decades in the fields of physical penetration testing and social engineering. He is frequently described in media coverage using colorful labels, including a "notorious hacker" (FOX25 Boston), a "World Class Hacker" (National Geographic's Breakthrough series), and a "paunchy hacker" (Rolling Stone), though he generally prefers to describe himself simply as a "hacker, helper, and human." According to his own account and multiple interviews, Street entered the security field around 2000, when a vice president at an internet bank hired him into a network security role. For roughly the first decade of his career he worked primarily in defensive, "blue team" security roles.

Transition to Physical Penetration Testing

Around 2010, while employed testing a bank's defenses, Street found that he was unusually effective at bypassing physical security controls to gain unauthorized access to secure areas -- work colloquially described as "robbing banks" in a testing context. He expanded this practice into a broader consulting career, conducting authorized physical penetration tests against banks, hotels, biochemical and research facilities, and government buildings across multiple continents. In interviews and talks, he has recounted specific engagements, including gaining access to a bank's internal network within roughly thirty seconds of walking through the front door during a lunch break by manipulating an employee, and using coordinated pretexting -- sometimes called a "crosstalk" technique involving multiple security guards and fabricated credentials -- to enter a high-security building near Ground Zero in New York City.

Philosophy and Methodology

Street has distinguished his approach from conventional red team engagements by emphasizing education over covert exploitation. He has stated in interviews that his goal is not simply to demonstrate that he can bypass an organization's defenses undetected, but to create what he calls "teachable moments" -- engagements structured so that client staff learn, in real time or shortly afterward, how the social engineering or physical bypass worked, so they can better recognize similar attempts in the future. He has summarized this philosophy in comments such as "I don't do red team engagements, I create teachable moments," and has described his method as attacking "how people operate" rather than attacking people themselves. Around 2016 he began developing what has been described as a security awareness engagement methodology, applying red-team-style tactics in a way intended to reveal real-world weaknesses without leaving lasting negative effects on the people involved.

Writing and Public Speaking

Street is a co-author of the "Dissecting the Hack" series of technical/narrative hacking books, which combine a fictional storyline with real technical material and have been used as assigned reading in information security courses at multiple colleges in several countries. He has also contributed to multiple volumes of the "Tribe of Hackers" book series. As a speaker, he has appeared at DEF CON, DerbyCon, GrrCON, Black Hat, THOTCON, NolaCon, DefCamp, and numerous other security conferences and academic institutions internationally, including a long-running guest lecturer role at the Beijing Institute of Technology. His talks typically use narrative accounts of physical penetration tests and social engineering engagements to illustrate security awareness lessons for both technical and non-technical audiences.

Roles and Affiliations

Street has served as DEF CON Groups Global Ambassador, a role connecting DEF CON's central organization with its network of independently run local chapters ('DEF CON Groups') around the world. Over the course of his career he has held titles including VP of Information Security at SphereNY, Chief Adversarial Officer at Secure Yeti, and, beginning in February 2026, Swarm Fellow at CovertSwarm, where he advises ethical hacking teams on full-spectrum attack methodology and mentors on physical security and social engineering technique.

Significance

Within the information security community, Street is best known not for a single high-profile breach or vulnerability disclosure, but for a long, publicly documented career of authorized physical penetration testing and social engineering engagements, delivered through storytelling that made these often-overlooked attack vectors accessible to broad audiences. His emphasis on treating security testing as an educational exercise -- rather than solely an adversarial exploit-for-exploit's-sake exercise -- has been cited as an influence on how some organizations approach the framing and follow-up of red team engagements.

Timeline

• 2000Enters the information security field after being hired into a network security role by a vice president at an internet bank.
• 2010While testing a bank's physical defenses, discovers a strong aptitude for bypassing physical security controls and begins shifting from defensive to offensive (red team) engagements.
• 2009Begins a long-running series of appearances at DEF CON as a speaker.
• 2016Develops a security awareness engagement methodology applying red-team tactics with an explicit focus on education over covert exploitation.
• 2020Recounts an engagement in which a client's improved security training, badge/lanyard systems, and camera monitoring successfully stopped his physical penetration attempts.
• 2026-02Joins CovertSwarm as Swarm Fellow, advising ethical hacking teams on full-spectrum attack methodology and mentoring on physical security and social engineering.