Security leader with 15 years across aviation, financial services, healthcare, e-commerce, and critical infrastructure. I lead and contribute hands-on across security architecture, engineering, and operations — securing cloud platforms and their posture, applying AI for security while securing AI systems themselves, and turning security analytics into proactive threat hunting.
focus:
ai_security: [AI for security, security of AI, LLM red teaming, MCP & agent security, MITRE ATLAS, OWASP LLM Top 10]
cloud_security: [cloud security architecture, posture management (CSPM), AWS, Azure, GCP]
devsecops: [pipeline security, SAST/DAST, IaC security, Kubernetes]
detection_and_ir: [security analytics, threat hunting, detection engineering, incident response, SOC leadership]
purple_team: [adversary emulation, penetration testing, vulnerability management, malware & APK reversing]
grc: [threat modeling, PCI DSS, NIST, HIPAA/HITRUST, ISO 27001, CMMC]
education:
- M.S. Computer Network Security — KL University
- M.S. Computational Science — Texas A&M–Commerce (IoT security research, SDPS Lab)| Project | What it does | Stack |
|---|---|---|
| AI_Security | Practitioner notes & methodology for AI/LLM security assessments | OWASP LLM Top 10 · MITRE ATLAS |
| E_Challan_Fake_APK_Analysis | Reverse engineering of Android malware used in fake traffic-fine scams | Smali · JADX |
| Suspicious_APK_Analysis | Static analysis tooling for suspicious Android packages | Python |
| Darcula_PK | Deobfuscation & analysis of a phishing-kit JavaScript payload | JavaScript |
| wazuh-aks-poc | Wazuh SIEM/XDR on Kubernetes (AKS) via Helm | Kubernetes · Helm · Wazuh |
| Threat_Hunt_KQL_Queries | Threat-hunting queries for Microsoft Defender | KQL |
| Domain | Tooling |
|---|---|
| ☁️ Cloud & Posture | AWS · Azure · GCP · Wiz · Lacework |
| ⚙️ DevSecOps | Jenkins · Azure DevOps · Ansible · Terraform · Docker · Kubernetes |
| 🧪 AppSec (SAST / DAST) | Checkmarx · SonarQube · Snyk · Burp Suite · OWASP ZAP · Invicti (Netsparker) · AppScan · Acunetix |
| 🎯 Offensive & Vuln Mgmt | Metasploit · Tenable (Nessus, IO, SC, OT) · Qualys · Rapid7 Nexpose · OpenVAS · open-source & commercial red-team tooling |
| 🛰️ SIEM, SOC & SOAR | Splunk · Microsoft Sentinel · Elastic (ELK) · LogRhythm · Sumo Logic · Security Onion |
| 🛡️ Endpoint & Threat Response | CrowdStrike · SentinelOne · Microsoft 365 Defender / Defender for Endpoint · Cylance · enSilo · Palo Alto · F5 WAF · Cloudflare · Infoblox |
| 🌐 Network & NDR | Darktrace · Arista Awake · Wireshark · TShark · tcpdump · TCP/IP · 802.11 · Cisco R&S · IoT protocols |
| 🔬 Forensics & Deception | Magnet AXIOM · Volatility · Autopsy · Acalvio ShadowPlex · T-Pot |
| 🤖 AI & Security Analytics | Python (pandas) · R · Apache Airflow · Superset · Power BI · Ollama · Hugging Face · RAG (ChromaDB, pgvector) · MCP |
| 📊 Risk & Human Layer | BitSight · SecurityScorecard · ImmuniWeb · KnowBe4 · Proofpoint · Cyberbit Range |
| 📜 Frameworks | NIST · PCI DSS · HIPAA · HITRUST · ISO 27001 · CIS Controls · CMMC L1/L2 · MITRE ATT&CK / ATLAS · OWASP Top 10 (Web, Mobile, IoT, LLM) · SANS |
- 🛰️ Building AI-driven attack surface & recon tooling on Kubernetes
- 🧠 Building AI agents for APK analysis, malware analysis, penetration testing & firmware analysis
- 🤖 Researching MCP server & agentic-AI security
- 📢 Writing the #AISEC series on Instagram to make AI security approachable
- 🟣 Running purple-team exercises & playing CTFs
