• SIEM

  SIEM Threat Monitoring

  Wazuh platform collecting logs from Windows and Linux endpoints, with custom rules for brute force, privilege escalation, rogue accounts and suspicious PowerShell. Triage in Kibana.

  Wazuh · Kibana

  Defensive
• Phish

  PhishGuard Analyzer

  Analyses emails, URLs and attachments for IOCs: malicious domains, URL obfuscation, spoofed senders. Outputs risk scores and incident reports.

  Threat intel

  Defensive
• SPL

  Splunk Monitoring Lab

  Home lab ingesting Windows security logs and Sysmon events. SPL queries and dashboards detect failed-login spikes and new accounts, mapped to MITRE ATT&CK.

  Splunk · Sysmon

  Defensive
• ESP32

  ReconX

  Portable wireless pentesting device on an ESP32. Demonstrates beacon flooding, de-authentication and BLE spoofing against 802.11 weaknesses.

  Hardware

  Offensive
• Scan

  AthenyX Scanner

  Multi-threaded web vulnerability scanner for SQL injection and directory traversal. Async requests cut scan time by 40%, with HTML risk reports.

  −40% scan time

  Offensive
• XSS

  AthenXSS

  XSS detection framework with custom payload injection to bypass WAF filters and confirm DOM-based execution. Automates Reflected XSS checks across browsers.

  WAF bypass

  Offensive

Two years on live targets.

• HackerOne

  Freelance vulnerability research · Oct 2023 – Dec 2025
  • Manual penetration testing of live web apps and APIs for SQLi, XSS, IDOR and broken authentication.
  • Recon with subdomain enumeration, Nmap and directory brute-forcing to map the attack surface.
  • PoC reports with CVSS ratings, MITRE ATT&CK mapping, impact analysis and remediation steps.
  • Kept to programme rules and confidentiality across all engagements.

Measured so far.

2+

Years of live bug bounty work

3

Role-focused résumés, one skill set

40%

Scan time saved in AthenyX

4

Security certifications