Through HackerOne, Intigriti, and Bugcrowd, I conduct vulnerability assessments and penetration testing on enterprise web applications and APIs. I investigated account takeover flaws involving OAuth state synchronization and stale email persistence, and tested privilege escalation and broken RBAC enforcement in enterprise APIs.
For my Master's thesis, I developed Linux malware to study evasion techniques and built an eBPF-aware detection framework in an ELK Stack environment. I also created a labeled Linux attack dataset and, in an independent project, used Elastic Stack, Fleet Server, and Auditbeat to examine security telemetry and hunt for command-and-control activity.
