Looking for a job

AJ Was

@ajwas

Application security researcher uncovering and responsibly disclosing vulnerabilities across open source software, with eight credited findings.

United States

Message

What I'm looking for

I'm looking for an application security, penetration testing, or vulnerability triage role.

Across ten open source projects, I’ve made thirteen public vulnerability disclosures, including eight credited findings carrying four CVEs and six GitHub Security Advisories. I report each finding privately to the maintainer first, then publish after a patch ships; all eight credited findings were confirmed and fixed by the vendor.

I write full disclosure reports with reproduction steps, working proof of concept, CVSS scoring, CWE classification, impact, and suggested remediation. I test applications running in Docker in a two-host Linux lab, starting from black-box probing and then reviewing source to explain what I found.

At Tiff's Treats, I wrote the facility’s HACCP and HARPC plans and supporting procedures, and built an environmental monitoring program to bring the facility into FDA compliance. I also built a raw-ingredient traceability system with Google AppSheet and Google Sheets, and JavaScript tools that helped audit distributor invoices and recover more than $14,000 in incorrect charges.

Experience

Work history, roles, and key accomplishments

Current

Independent Security Researcher

Current

Self Employed

Jan 2026 - Present (9 months)

Conducts vulnerability research in open source software, reporting findings privately and publishing after patches. Produces detailed disclosure reports with reproduction steps, proof of concept, CVSS scoring, and remediation.

Vulnerability Research Penetration Testing Burp suite Ffuf Nmap Wireshark Docker Linux CVSS CWE CVE GitHub Security Proof of Concept Development Source Review Fuzz Testing AFL++LibFuzzer AddressSanitizer

Quality Assurance and Supply Chain Analyst

Tiff's Treats

Jun 2025 - Jul 2026 (1 year 1 month)

Managed quality and R&D complaints from 150 locations and five contract manufacturers, performing investigations and root cause analysis. Built JavaScript tools to audit distributor invoices, recovering over $14,000 in incorrect charges and reducing shipping costs by $50,000 annually.

JavaScript Data Analysis Audit Vendor Management Root Cause Analysis Process Improvement Cost Reduction

Production Manager

Tiff's Treats

Jan 2018 - Jun 2025 (7 years 5 months)

Developed and implemented FDA compliance programs including HACCP and HARPC plans, environmental monitoring, and raw ingredient traceability. Started the shipping department from scratch, managing carrier contracts and logistics.

HACCP HARPC FDA Compliance Environmental Monitoring Traceability Google AppSheet Google Sheets Logistics ShipStation team training

Production Associate

Tiff's Treats

Feb 2016 - Jan 2018 (1 year 11 months)

Produced cookie dough and learned the full manufacturing process from the floor up.

Corrections Officer and Deputy

Wharton County Sheriff's Department

Nov 2011 - Nov 2015 (4 years)

Controlled access, movement, and custody within the facility, conducting welfare checks and writing incident reports. Served as a field training officer supervising new recruits.

Incident Reporting Court Testimony Support (As Required)Training Security Procedures

Education

Degrees, certifications, and relevant coursework

Austin Community College

Associate of Applied Science, Local Area Network Systems Security Administration

Grade: 3.73 GPA

Activities and societies: Scholastic Excellence Award

Earned an Associate of Applied Science in Local Area Network Systems Security Administration with a 3.73 GPA and a Scholastic Excellence Award, while working full time.