At SCode Technologies, I assess client applications and infrastructure with Nessus and OWASP ZAP. I manually validate findings, prioritize vulnerabilities, and prepare reports with technical evidence and remediation guidance.
On my Automated AD Cyber Range & Attack Path Platform project, I built a multi-domain Active Directory environment and validated attack scenarios. I also developed an engine that uses BloodHound JSON output and an LLM-assisted pipeline to explain and prioritize privilege-escalation paths.
I researched CVE-2024-21762, CVE-2024-23897, and CVE-2025-24813, documenting reproduction procedures, vulnerability mechanics, and remediation guidance. My research artifacts include proof-of-concept code and lab environments.
I also built an HTTPS-based command-and-control framework for an isolated lab, with an encrypted beacon agent and centralized server. As a Technical Member at GDG on Campus, GHRCEM, I designed and delivered hands-on security workshops and mentored student teams.
