Skills
Offensive Security: Threat modeling, white-box web application testing, internal Active Directory attacks, cloud security (Azure/AKS)
AI / Research Tooling: Prompt injection/jailbreaks, agent tool-calling abuse, LLM-assisted SAST, agent orchestration
Languages: Python, C, Ruby
Tools: AWS, Burp Suite, BloodHound, Responder, Semgrep, Nmap, Metasploit
About
Offensive security engineer focused on white-box review, LLM/agent adversarial testing, and AI-assisted vulnerability discovery. At Instacart, built the design-review pipeline and SSDLC used by product teams and tested internal LLM features, with findings incorporated into product safeguards. Built agentic SAST and GraphQL security tooling; disclosed an authenticated RCE in uselagoon/lagoon and a multi-bug root RCE chain in GL.iNet firmware.
Profile Photo
