Certifications
Software engineer building backend services, cloud infrastructure and ML pipelines, mostly in Python and Go. I secure what I build, which is a large part of why it holds up.
Two CVEs, two IEEE papers, and an MEng in Cybersecurity at the University of Maryland.
Based in College Park, Maryland.
Experience
Education
GPA 3.8 / 4.0. Selected coursework:
GPA 8.8 / 10.
CVEs
Process execution requests to the OGC API accept a subscriber object, and the server calls the URLs it is given. An unauthenticated caller can point those callbacks at internal HTTP services reachable only from the server.
The STAC FileSystemProvider resolves requested paths without confining them to the configured data directory, so traversal sequences walk outside it. Without protective middleware in front, that discloses directory contents to an unauthenticated user.
Publications
A CNN-based web application reaching 90% accuracy on the ISIC dataset for melanoma, nevus, and seborrheic keratosis classification.
A CNN model reaching 88% accuracy classifying skin lesions from the ISIC dataset.
Work
AWS environments built as code, from deployable reference architectures to hardened baselines and the audits behind them.
Models and the pipelines around them, trained, tracked and served rather than left in a notebook.
Full-chain offensive engagements, written up from initial access to objective.
Further engagement reports are not published here.
Deployment pipelines and Kubernetes platforms, with the release gates, signing and rollbacks that keep them honest.
Memory corruption from the ground up, and turning crashes into control.
Reconstructing what happened, how, and when, from the logs left behind.
Securing the interfaces AI systems expose, and the protocols they speak.
Contact
The fastest way to reach me is email. Either address works.
