Oct 2024 – Present
- Main backend engineer and head of engineering for the company's flagship managed security platform — owned technical direction and delivery end to end
- Sole backend developer for a production dating application (FastAPI, Supabase, Redis, AWS), built to scale horizontally from thousands of concurrent users toward millions
- Designed the application's security architecture: autonomous threat detection, monitoring, and an automated ban system for real-time protection
- Primary developer, researcher, and L2 SOC analyst for a single-tenant managed open-source security platform covering code analysis, cloud security, credential-leak detection, container analysis, and EDR + SIEM integration
- Built agentic AI workflows and modular control pipelines for security automation and threat analysis
- Owned compliance across deployed environments: control mapping, audit readiness, and SOC 2 readiness preparation
- Ran end-to-end risk assessment with EPSS, CISA KEV, and SSVC-based prioritization so remediation focused on real business risk
- Owned AWS and Azure infrastructure: deployment, cost optimization, Cloudflare security and DNS; cost simulations at million-user scale found S3 and network inefficiencies projected to cut cloud costs by 90%
- Led a 3-person frontend team through the full project lifecycle; introduced sprint management and product-lifecycle planning
- Managed client relationships directly; represented the firm in university talks and ran intern and employee training
Feb 2026 – Present
- Building and maintaining the software Golden Fork Ventures needs for compliance and day-to-day operations, remotely alongside my primary role
- Deploying these systems on custom on-premise hardware: provisioning, networking, and ongoing upkeep
- Running self-hosted server infrastructure on Proxmox VE with per-service LXC/VM isolation and secure remote access
- Keeping compliance-critical services reliable and audit-ready through monitoring, updates, and maintenance
Mar 2024 – Oct 2024
- Built proof-of-concept implementations for security research, automation workflows, and experimental tooling
- Wrote custom automation scripts for testing, monitoring, and data processing
- Built a complete point-of-sale system for a restaurant venture, deployed on a local system with edge networking adjustments
- Built and deployed a low-cost design studio site for a designer selling third-party products on Amazon
- Provided technical writing and review for research papers and documentation
May 2023 – Mar 2024 · Cybersecurity, then Offensive Security
- Ran cloud security assessments across AWS and Azure — misconfigurations and exposure risks
- Built security-focused Infrastructure-as-Code environments using Terraform for testing and research
- Did vulnerability research and penetration testing on infrastructure and application components
- Wrote Python red-team and security automation tools to support assessment workflows
- Researched Linux initialization, system hardening, supply-chain security tooling (SBOM — Trivy, Syft), AWS security rules, and early-stage AI applications in cybersecurity
| Project | Stack | Description |
|---|---|---|
| PICOTTY | CircuitPython Python Embedded |
Networked serial console for fleets of headless machines: Pi Pico nodes with W5100S Ethernet and USB HID injection, a Pi Zero 2 W hub with live WebSocket streaming, YAML runbooks, and OTA firmware updates with rollback protection |
| GPT-Vuln-Analyzer | Python GPT Llama2 Ollama |
AI-assisted vulnerability analysis with DNS recon and subdomain enumeration across multiple LLM backends |
| HackBot | Python GPT |
LLM-powered assistant for security analysis, code inspection, and scan result interpretation |
| CVE-LLM-Dataset | Dataset NLP |
Structured CVE dataset for training and evaluating LLMs on vulnerability intelligence |
| Startup-SBOM | Python Linux SBOM |
Reverse-engineers Linux boot to produce SBOM-style startup and persistence vector output |
| QuadraInspect | Python Android |
Automated APK security analysis framework for permission inspection and vulnerability detection |
| Brute Framework | Python Windows |
All-in-one Windows security testing framework rebuilt from scratch, inspired by PentestBox |
| Nmap-API | Python REST Flask |
RESTful API wrapper around Nmap for programmatic network scanning via structured endpoints |
| C2C-Server | Python Red Team |
Command-and-control server demonstrating real-world C2 communication and attack patterns |
| WinFiHack | Python WiFi Windows |
WiFi automation experiments using native Windows wireless networking libraries |
| Komo.do-Hub | Java Node.js React Native |
Mobile interface for the Komodo container management platform |
| Domain | Title | Venue |
|---|---|---|
| Cybersecurity & Anomaly Detection | Hybrid Quantum-Classical Neural Network Incorporating Attention Mechanisms for Anomaly Detection | Springer |
| Cybersecurity & ML | API-Based Network Scanning | Research Paper |
| Cybersecurity & ML | AI-Based Enumeration and Exploit Suggester | JETIR |
| Cybersecurity & ML | AI in Action: Exploiting the Nexus of Cybersecurity | Research Paper |
| Cybersecurity & ML | Using Autoencoders for Malware Detection | FMDB |
| Cybersecurity & Cloud | Docker-Based Decentralized Vulnerability Assessment | FMDB |
| Network Security & ML | ML-Driven Secure Communication for 6G Networks | Springer |
CEH v12 | CND — EC-Council (Valid 2023–2027)
