At Fluid Attacks, I find authorization and business-logic flaws in client applications, including account takeover via OTP bypass, authentication bypass, and IDOR. I validate findings under CVSS v4.0 and work with development teams on fixes through retesting.
I perform manual secure code review and dynamic testing for PTaaS clients in sectors including financial services, food, and logistics. I also build AI-assisted review workflows that pre-analyze code paths while keeping findings human-validated.
At CrossBorder Tech, I conducted penetration tests and vulnerability scans for public-sector applications, systems, and networks. I also developed Python tooling to automate checks for issues such as vulnerable TLS configurations and certificates.
As a freelance full-stack developer, I designed, built, and deployed software products. On Secure POS, I secured a point-of-sale system with a segmented Docker deployment, HTTPS access, JWT authentication, TOTP 2FA, role-based access control, and audit logging.
