01
Professional Experience
Independent Security Consultant
Conduct authorized security assessments and adversary
simulations to evaluate organizational security posture,
validate defensive controls, and help engineering teams
remediate exploitable weaknesses.
- Perform scoped web application and API penetration tests.
- Identify authentication, authorization, and business logic vulnerabilities.
- Conduct attack-path analysis and controlled adversary simulations.
- Develop Python and Bash scripts to automate repeatable security checks.
- Produce actionable technical reports with prioritized remediation guidance.
- Collaborate with blue teams to improve detection, logging, and incident response.
Northstar Digital Solutions
Led the development of scalable backend services, internal
platforms, and customer-facing applications, with a strong
emphasis on maintainability, performance, and secure design.
- Designed RESTful APIs and distributed backend services using Python, Go, and TypeScript.
- Improved application performance through profiling, caching, and database optimization.
- Designed CI/CD pipelines and automated testing workflows.
- Introduced secure coding standards, code reviews, and dependency auditing.
- Mentored developers and collaborated with product and infrastructure teams.
Vertex Software Labs
Built and maintained web applications, backend services,
and data-driven features for business software products.
- Developed application features using JavaScript, Python, and SQL.
- Integrated third-party APIs and implemented authentication workflows.
- Designed relational database schemas and optimized complex queries.
- Wrote unit and integration tests and resolved production issues.
- Participated in architecture discussions, sprint planning, and code reviews.
02
Selected Projects
01 / SecureCode Analyzer
A developer-focused security analysis platform designed to
identify common coding weaknesses, flag risky dependencies,
and integrate automated security checks into CI/CD pipelines.
Python
FastAPI
Docker
CI/CD
AppSec
02 / Adversary Simulation Toolkit
A modular toolkit for authorized security assessments,
evidence collection, attack-surface documentation, and
repeatable validation of defensive security controls.
Python
Bash
Linux
MITRE ATT&CK
03 / Distributed API Platform
A scalable backend platform featuring service-oriented
architecture, structured logging, automated deployments,
role-based access control, and comprehensive test coverage.
Go
PostgreSQL
Redis
Docker
REST APIs
03
Engineering Philosophy
I believe security and software quality are inseparable.
My development background helps me understand how systems
are built, while my offensive security experience helps me
recognize how they can fail. I aim to bridge the gap between
development and security through automation, thoughtful
architecture, measurable risk reduction, and clear technical
communication.