About
IT and cybersecurity professional focused on application security, vulnerability management, and risk assurance within enterprise environments. Currently working in application security, supporting the identification, validation, and remediation of security findings across the software development lifecycle.
Experienced in translating technical vulnerabilities into actionable risk decisions while collaborating with engineering, security, and audit teams. Background in IT operations and analytics provides a strong foundation for understanding systems at scale and improving security processes.
Continuously developing expertise in application security, penetration testing, and secure development practices, with a focus on building practical, scalable security solutions that align with business needs.
This site is where I publish coordinated vulnerability disclosures, bug bounty writeups, and notes from CTFs and certification study, once a fix has shipped and it's safe to talk about. If you're a maintainer and something here needs a correction, reach out and I'll fix it.