About

I am a security professional working across offensive and defensive security. I have done penetration testing, vulnerability assessment, and SOC work for organizations in finance, telecommunications, aviation, and cloud infrastructure.

Most days move between breaking things and making them hold: testing web, mobile, API, and desktop applications, writing detection rules, and building small tools that make assessments faster. I care about the fix as much as the finding, so I stay with teams until an issue is actually closed.

My vulnerability research has led to a CVE in Oracle Analytics Desktop and to acknowledgements from the U.S. Department of Education, Yamaha Motor, and Norton VPN.

4
CVE identifiers: 16
certifications: 100+
custom detection rules written: 4
industry sectors served

Areas of focus

Offensive Security

Penetration testing across web, mobile, API, thick client, and network targets, including bypassing controls such as WAFs, AMSI, and XDR.

Defensive Security

SOC operations and threat detection, with custom Sigma and ElastAlert rules mapped to MITRE ATT&CK.

Research

Vulnerability discovery and responsible disclosure, along with tracking emerging threats and attack techniques.

Engineering

Internal tools and automation for assessment workflows, plus security work supporting PCI DSS and ISO 27001.

Recognition

CVE-2025-21532
Oracle
High severity vulnerability in Oracle Analytics Desktop.
ED
Certificate of Recognition
U.S. Department of Education
Identified a high severity vulnerability in a publicly accessible system and acknowledged for the responsible disclosure.
Vulnerability Disclosure Recognition
Yamaha Motor
Recognized for identifying a security vulnerability.
Vulnerability Disclosure Recognition
Norton VPN
Recognized for identifying a security vulnerability.