Breaking applicationsto understand how they fail.
Application security engineer focused on Web, API, Android, iOS, reverse engineering, cloud security, AI security and security research.
Security Domains
Areas of security research
A practical security focus across application, mobile, infrastructure and emerging AI attack surfaces.
Web Security
Application security testing, authentication, authorization, session management, business logic and OWASP-based assessments.
API Security
REST API assessment, authorization testing, IDOR, JWT analysis, rate limiting and business logic testing.
Android Security
Static and dynamic analysis of Android applications, runtime instrumentation, SSL pinning and root detection analysis.
iOS Security
iOS application analysis, runtime instrumentation, certificate validation analysis and binary inspection.
Reverse Engineering
Binary analysis, native library analysis, application instrumentation and understanding custom security controls.
Cloud Security
AWS security assessment covering IAM, storage, networking, compute and cloud infrastructure configurations.
AI Security
Security testing of LLM applications, agents, prompts, tools and application-level AI attack surfaces.
Network Security
Network reconnaissance, service enumeration, traffic analysis and application communication testing.
Toolkit
Tools I work with
Application Security
Mobile Security
Reverse Engineering
Cloud & Infrastructure
Development & DevSecOps
AI Security
Experience
Security Engineering
Security Engineer
Experience across web application security, API assessments, Android and iOS security testing, source code review, vulnerability research, security automation and secure SDLC practices.
Contact
Interested in security research?
Security engineering, research, collaboration or technical discussions.