Application Security Specalist
Cybersecurity professional with over 3 years of hands‑on experience, currently working in an application security role that bridges secure develop‑ ment and offensive security. Passionate about penetration testing, vulnerability analysis, and secure software design. I’m a proactive, technically‑ minded individual who enjoys building secure‑by‑design solutions, supporting developers, and continuously learning to stay ahead of evolving threats. With a strong foundation in both security and development practices, I thrive in dynamic environments where I can contribute to building robust, secure, and scalable applications.
• Trusted as a penetration testing specialist for multiple mission‑based assessments, focusing on web and mobile applications in critical indus‑ tries such as healthcare and e‑commerce. • Deliver professional‑grade reports that combine clear technical detail with business impact analysis and practical remediation steps, improving client application security posture
• Led and participated in kick‑off meetings and technical scoping sessions with clients to define engagement objectives, testing scope, timelines, and business priorities. • Conducted end‑to‑end penetration tests and vulnerability assessments for critical clients in banking, government, and private sectors — deliv‑ ering results aligned with real‑world threats and compliance needs. • Spearheaded purple teaming operations using Atomic Red Team, enabling continuous collaboration and feedback between red and blue teams to improve detection and response. • Developed an in‑house Django‑based reporting automation tool, cutting down manual effort and improving consistency and turnaround time of final reports by over 50 . • Supported internal knowledge sharing and process improvement through tooling, documentation, and mentorship of junior security team members.
• Secured internal web apps using F5 WAF, and ensured compliance with CIS benchmarks via Ansible automation. • Worked as a Linux system administrator (CentOS) supporting internal classified systems and DevOps pipelines. • Identified and remediated code‑level vulnerabilities by collaborating with developers on secure design fixes
I am thrilled to announce that I've earned the Offensive Security Certified Professional (OSCP) certification from OffSec Security! Thanks to OffSec for the great content and Lab and to Realistic Security for the support and help. Excited to persist in learning and applying my skills in the field. Next Challenge: OSEP ...
Verify