Software Security Engineer
I work in application and product security, covering threat modeling, secure design review, manual and dynamic testing, and remediation validation. I also build the systems I review, using React, Flask, Python, and Docker, which keeps my findings specific to how the software actually ships.
Selected work
Security engineering work where I built the system and then assessed it as a target.
Application and cloud security
Built a production style AWS environment, then assessed it as a target across identity, network, host, and data controls.
Threat modeling and detection
Segmented a two tier LAMP environment, threat modeled it with STRIDE and DREAD, and instrumented it with centralized log monitoring.
Writing
Notes on certifications, offensive security practice, and findings worth writing down.
What actually changed between starting PEN-200 and passing the exam. Less about tooling than about method, and about treating every box as a full attack path.
A practical walkthrough of database layer weaknesses. Injection beyond the basics, privilege and role misconfiguration, and the escalation paths they open up.
Capabilities
Security specialisms first, followed by the engineering and infrastructure work that supports them.
Get in touch
Open to full time roles in application security, product security, and cloud security.