About Me

Focused on cybersecurity, ethical hacking, offensive security, defensive security, cloud security, and security research.

Experienced in identifying attack paths, analyzing complex threat activity, and developing security tooling for both offensive research and defensive operations.

Strong background in Python, Bash, Shell, and PowerShell security engineering, with practical experience in SIEM optimization, threat modeling, DevSecOps, CI/CD security, and MITRE ATT&CK driven adversary emulation.

Working in cybersecurity since 2023.

Focus Areas

  • Application Security (AppSec) & Secure Code Review (SAST/DAST)
  • Penetration Testing (Web, Network, Wireless)
  • Malware Analysis & Reverse Engineering (RE)
  • Digital forensics & Incident Response (DFIR)
  • Threat hunting & OSINT Investigations
  • Detection Engineering (Sigma, SPL, KQL)

Skills Matrix

Category Tools & Technologies
DevSecOps & AppSec SonarQube, Semgrep, OWASP ZAP, Trivy
Offensive Security Metasploit, Burp Suite, Nmap, SQLMap
Defensive Security Splunk, ELK Stack, Wazuh, Wireshark
Digital Forensics & Reverse Engineering Autopsy, Volatility, FTK Imager, Ghidra
Programming & Automation Python, Bash, Shell, PowerShell
Cloud & Infrastructure Docker, Kubernetes, AWS, Terraform

Security Repositories

GitHub Repository Description
Security Playbooks Security Playbooks is a defensive security repository designed for cybersecurity professionals and SOC analysts.
Secwexen Arsenal Secwexen Arsenal is a defensive security repository designed for security research.

Contributions

  • Conducted research in network security and developed new vulnerability scenarios.
  • Developed new Python modules for the cybersecurity engine AAPP-MART.
  • Published technical research notes on malware reverse engineering and network protocol analysis.
  • Performed vulnerability assessments and created Proof of Concept (PoC) exploits in controlled lab environments.
  • Designed CTF challenges for cybersecurity training and red team simulations.
  • Integrated automated AppSec testing pipelines into secure development lifecycles.

Current Work

  • Developing Python-based security tools for automation
  • Preparing for OSCP certification
  • Building new CTF challenges for Red Team simulations

Contact