My web application security practice spans PentesterLab, PortSwigger Web Security Academy, and my personal lab, where I test applications in controlled environments. I work through reconnaissance, enumeration, and the identification and validation of vulnerabilities using OWASP Top 10 methodology.
On my academic Secure Medical Data Platform project, I implemented role-based access controls, permission expiration and revocation, JWT authentication, and password hashing. The platform also includes emergency “Break-Glass” access, audit logging, real-time notifications, and automated tasks.
I also created a first-year Password Manager project in C, implementing authentication logic and local data handling while applying principles for protecting sensitive information.
My software development studies give me a foundation in web architecture, databases, and APIs. I’m currently preparing for the Hack The Box CPTS certification.
