At HelloFresh, I screen GitHub pull requests for security breaches before approval and respond to security issues raised in Jira. I also use Agentic AI to automate repetitive work, including pull-request approvals and ticket reviews.
At REVLV Solutions Inc., I conducted VAPT for internal and external websites, implemented a fake-SSH honeypot to track attacker commands, and managed FortiGate firewall rules. I also developed a dashboard summarizing blocked categories.
My Cowrie SSH/Telnet Honeypot project captured attacker activity and logged it to PostgreSQL for threat analysis. I patched PostgreSQL logging bugs and implemented controlled credential access through userdb.txt.
For my Post-VAPT Automated Detection and Response project, I developed Elastic Security detection rules and integrated Elastic Agent and Elastic Defend into a real-time monitoring workflow. I also built a hybrid web attack detection system using FastAPI, which achieved a 0.946 ROC-AUC and 95.9% zero-day XSS recall on CSIC 2010.
