Security & Network Engineer
I break systems so organisations don't have to.
Network engineering · Offensive security · Vulnerability research · Red teaming · AI security.
About
Security engineer focused on offensive operations, vulnerability research, and AI security. I work across the full attack chain — from initial recon through exploitation, post-exploitation, and responsible disclosure.
Hands-on experience securing e-commerce platforms against OWASP Top 10 threats, conducting red team engagements to domain admin, and building custom tooling for threat intelligence and C2 infrastructure. Active HackerOne/Bugcrowd researcher with a track record of responsible disclosure to major platforms.
When I'm not breaking things, I'm reverse engineering them — or writing about why they broke, for practitioners, not press releases.
Experience
validate_inline_codes(), a Counter-based diff validator with 11 unit tests, and drove the fix through code review and merge via PR #309, establishing integrity guarantees for the entire compression pipeline.is_sensitive_path() false positives blocking documentation files with security-related names (e.g., password_policy.md, secrets_management_guide.md) — introduced a _DOC_EXTENSIONS allowlist with 23 test cases, submitted via PR #308.X-PAN-AUTHCHECK: off via /php/ztp_gate.php/.js.map to fingerprint unpatched PAN-OS management interfaces, with multi-condition response matching (HTTP 200 + ZTP title) eliminating false positives against patched and non-target hosts. Submitted via PR #1444 with 5 test scenarios.Technical Arsenal
Credentials