Focused on cybersecurity, ethical hacking, offensive security, defensive security, cloud security, and security research.
Experienced in identifying attack paths, analyzing complex threat activity, and developing security tooling for both offensive research and defensive operations.
Strong background in Python, Bash, Shell, and PowerShell security engineering, with practical experience in SIEM optimization, threat modeling, DevSecOps, CI/CD security, and MITRE ATT&CK driven adversary emulation.
Working in cybersecurity since 2023.
- Application Security (AppSec) & Secure Code Review (SAST/DAST)
- Penetration Testing (Web, Network, Wireless)
- Malware Analysis & Reverse Engineering (RE)
- Digital Forensics & Incident Response (DFIR)
- Threat Hunting & OSINT Investigation
- Detection Engineering (Sigma, SPL, KQL)
| Category | Tools & Technologies |
|---|---|
| DevSecOps & AppSec | SonarQube, Semgrep, OWASP ZAP, Trivy |
| Offensive Security | Metasploit, Burp Suite, Nmap, SQLMap |
| Defensive Security | Splunk, ELK Stack, Wazuh, Wireshark |
| Digital Forensics & Reverse Engineering | Autopsy, Volatility, FTK Imager, Ghidra |
| Programming & Automation | Python, Bash, Shell, PowerShell |
| Cloud & Infrastructure | Docker, Kubernetes, AWS, Terraform |
AAPP-MART (AI-Powered Autonomous Attack Path Prediction & Multi-Agent Red Team Simulation Engine) is a cybersecurity engine designed for offensive security and purple teaming.
GitHub Repository: AAPP-MART
| GitHub Repository | Description |
|---|---|
| Security Playbooks | Security Playbooks is a defensive security repository designed for cybersecurity professionals and SOC analysts. |
| Secwexen Arsenal | Secwexen Arsenal is a defensive security repository designed for security research. |
- Conducted research in network security and developed new vulnerability scenarios.
- Developed new Python modules for the cybersecurity engine AAPP-MART.
- Published technical research notes on malware reverse engineering and network protocol analysis.
- Performed vulnerability assessments and created Proof of Concept (PoC) exploits in controlled lab environments.
- Designed CTF challenges for cybersecurity training and red team simulations.
- Integrated automated AppSec testing pipelines into secure development lifecycles.
- Developing Python-based security tools for automation
- Preparing for OSCP certification
- Building new CTF challenges for Red Team simulations
- PGP: PGP Public Key