01. about_me
Security engineer with a focus on application security, DevSecOps, and building secure-by-default pipelines. I work at the intersection of development and security — embedding SAST, SCA, and container scanning into CI/CD workflows so vulnerabilities get caught before they ship.
My day-to-day involves working with tools like Semgrep, Snyk, and Wiz to enforce security guardrails across codebases and cloud infrastructure. I write code in Python, Java, JavaScript, and C++ — which helps me think like both the developer and the attacker.
Outside of work, I'm a CTF enthusiast, constantly learning new exploitation techniques and staying sharp on the offensive side to better understand what I'm defending against.
Certified AI Security Professional
↳ Practical DevSecOps
Certified DevSecOps Professional
↳ Practical DevSecOps
Google Cybersecurity Certificate