- 💼 Product Security Engineer at Splunk
- 🎓 Bachelor's in Computer Science and Engineering
- 🛡️ Skilled in penetration testing (web, mobile, network), threat modeling, SAST/DAST, and DevSecOps
- 🐳 Lead OWASP-Nightingale v2.0 — 300+ stars, web GUI, 200+ pentest tools
- 🔗 Building tools for supply chain security, SBOM analysis, and security education
- 🎮 Active in Hack the Box, solving security challenges
- 🤝 Passionate about community collaboration and mentorship
- 🔍 Penetration Testing (Web, Network, Mobile)
- 🛡️ Threat Modeling & Vulnerability Assessment
- 📝 Source Code Review (SAST)
- 🔒 DevSecOps & CI/CD Integration
- 🐳 Docker Security & Containerization
- 📦 Supply Chain Security & SBOM Analysis
- 🤖 Automation (Shell & Python)
-
Nightingale v2.0 — Docker for Pentesters:
- OWASP Incubator pentest framework with web GUI, 200+ tools, embedded VS Code, and AI-assisted analysis
- 300+ GitHub stars | OpenSSF Best Practices certified
- Tech: Docker, Python, Bash, JavaScript
-
- CycloneDX SBOM parser with interactive vulnerability dashboard, filtering, and export
- Tech: Node.js, Alpine.js, Tailwind CSS
-
Supply Chain Attack Simulator:
- 22 hands-on labs for understanding, practicing, and defending against supply chain attacks
- Tech: Python, Node.js, Shell
-
- Structured security interview guides, threat modeling, zero-to-hero, and source code review
- Tech: HTML, Markdown
-
- AI-assisted security threat modeling from uploaded ERD and supporting documents plus architecture diagrams
-
- CWE-based vulnerability reference and mitigation guide
- Tech: Markdown
-
Speaking Engagements:
- Blackhat Arsenal ASIA 2022, 2023, 2024
- Blackhat Arsenal EU London 2025
- OWASP Global AppSec EU 2022
- Docker Community Hands-On Event
- Blackhat Arsenal MEA 2022, 2023 (Shortlisted)
- c0c0n 2024
- IWCON 2024
-
Hack the Box:
- Solving challenges and learning from peers in the cybersecurity community
- My Blog: Sharing tutorials, insights, and research in cybersecurity.
- Portfolio: Interactive terminal-style portfolio.