About
What I do
Skills
Toolbox
Certifications
Stats
Connect
I'm a cybersecurity-focused technologist who enjoys building secure systems and learning how modern attacks work so I can defend against them. My work sits where offensive security, threat modeling and applied AI meet — from automated reconnaissance tooling to real-time computer vision and autonomous agent runtimes.
Three things shape how I work:
- Security mindset — threat modeling, least privilege, secure defaults and continuous hardening.
- Curiosity by default — CTFs, labs, reversing and practical experimentation over theory alone.
- Builder's discipline — automation scripts, tooling and web applications that people can actually use.
The full set of disciplines I work across — not everything at the same depth, but all of it hands-on.
| Discipline | What that means in practice |
|---|---|
| 🔴 Penetration testing | Scoped internal and external assessments: recon, enumeration, exploitation, privilege escalation, reporting with reproduction steps |
| 🧪 Malware analysis | Static and dynamic triage, unpacking, behavioural and IOC extraction, YARA/Sigma rule authoring, sandbox and isolate-and-observe workflows |
| 🪟 Active Directory security | AD enumeration and attack-path mapping, Kerberos abuse, ACL/AD CS misconfigurations, tier-0 hardening and detection engineering |
| 🕵️ Threat intelligence & modeling | STRIDE and attack-tree modeling, MITRE ATT&CK mapping, adversary profiling, indicator enrichment and prioritisation |
| 🚨 Digital forensics & IR | Memory and disk acquisition, timeline reconstruction, log and packet analysis, containment and post-incident hardening |
| 🧷 Application security | Secure code review, OWASP Top 10 and API Top 10 testing, authentication/authorisation design, dependency and supply-chain review |
| 🌐 Web development | React/TypeScript front ends, accessible design systems, performance budgets and SEO-sane markup |
| 📱 App development | Flutter and Android builds, cross-platform mobile clients, offline-first state and API integration |
| ⚙️ Backend & APIs | Python and Node services, REST/GraphQL/tRPC design, queues, background workers and auth boundaries |
| 🗄️ Databases & data engineering | Relational and document modelling, indexing and query tuning, ETL and telemetry pipelines |
| 🤖 Machine learning | Supervised training and evaluation, feature work, model comparison, and knowing when not to use ML |
| 👁️ Computer vision | Real-time stream ingestion, YOLO/OpenCV inference pipelines, tracking and anomaly eventing |
| 🧠 AI agents & automation | State machines, tool calling, memory, planning/reflection loops, sandboxed execution and bounded autonomy |
| ✍️ Prompt engineering & LLM systems | Prompt and context design, structured output, retrieval-augmented pipelines, evaluation harnesses and guardrails |
| 🐧 Linux & systems | Kernel namespaces, systemd, cgroups, shell automation, hardening and low-level debugging |
| ☁️ DevOps & infrastructure | Reproducible environments, CI/CD, containers, observability and least-privilege deployment |
| 🔌 Hardware & IoT | Raspberry Pi and Arduino experiments, firmware curiosity, sensor telemetry and physical-layer thinking |
| 📝 Research & writing | CTF write-ups, lab documentation, technical notes, and turning findings into things other people can act on |
Every icon is a link — click any logo to open the official site, docs or download page.
The security stack, malware-analysis bench and AI tooling I work with — all linked to their official sources.
🔭 Focus: offensive security & pentesting · web application exploitation · threat modeling & defense
| Credential | Issuer | Year | Verify |
|---|---|---|---|
AI for Everyone: Master the Basics (AI0101EN) |
IBM · edX | 2026 | Certificate |
| Claude Code 101 — completion badge | Claude Academy · Anthropic | 2026 | Badge |
| Full certification list | — | View credentials |
Every assessment, lab and report is performed with explicit authorisation. No exceptions.
All widgets are live. Counters (followers, stars, repos, views) re-cache at most once a day — cacheSeconds=86400 — so they stay current without ever going stale. If a card is ever blank, GitHub's image proxy is mid-refresh; it heals within minutes.
💬 Open to collaborations, security research and interesting problems. The fastest way to reach me is email — or open an issue on any repository.
Built with React, TypeScript and a healthy distrust of defaults. · Back to top