I am an OSCP+ and OSWE-certified penetration tester with a strong foundation in full-stack software engineering. I specialize in discovering and exploiting high-impact vulnerabilities in web applications and APIs.
I combine offensive security expertise with practical development knowledge to review source code, understand application architecture, and build reliable proofs of concept. My work focuses on delivering actionable remediation guidance alongside security findings.
I have identified more than 60 vulnerabilities through private bug bounty programs and security testing engagements. I have experience testing fintech applications, including POK and PAGO, and have contributed to security audits recognized by ePanel.
My web and API security expertise includes IDOR, XSS, SSRF, SQL injection, race conditions, business logic flaws, and authorization issues. I also work with Linux privilege escalation and post-exploitation techniques.
Alongside security work, I have built and led full-stack engineering teams, developing backend APIs, managing server-side systems and ORMs, and delivering frontend applications. I use my engineering background to collaborate effectively with developers and improve secure software delivery.
Worked as a full-stack engineer, developing backend APIs, managing server-side systems, and working with ORM-based application components. Built and maintained client-side functionality using frontend programming languages.
Performed red-team cybersecurity operations, applying offensive security knowledge to assess applications and identify security risks.
Led engineering work across backend and frontend development, including API development, server-side management, ORM, and client-side implementation. Managed tasks and supported software delivery activities.
Conducted code reviews for team members and provided technical leadership to improve code quality and team execution.
Developed backend services involving API development, server-side management, and ORM. Also contributed to frontend development using client-side programming languages.
Supported team leadership activities, task management, and peer code review to maintain implementation quality.
Worked on backend engineering responsibilities, including API development, server-side management, and ORM-based systems. Delivered frontend functionality using client-side programming languages.
Contributed across the full software development lifecycle as a full-stack engineer.
MSc, Information Technology
Master of Science in Information Technology.
BSc, Information and Communication Technology
Bachelor of Science in Information and Communication Technology.
This professional hasn’t added portfolio projects yet.
This professional hasn’t listed any services yet.
