Exploit & attack-surface analysis
I validate reported proofs of concept and examine the trust boundaries around validators, bridges, minting flows, and smart contracts.
All domains
OVERVIEW 04 / CYBERSECURITY
Security analysis from source code to attack surface.
My security background includes validating reported exploit proofs of concept, examining blockchain infrastructure and contracts, and building security lab environments. I combine source analysis with a view of the wider system: the service, its dependencies, and its trust boundaries. My current projects extend that work into threat intelligence and controls for AI-assisted operations.
THE ENGINEERING SCOPE
What I work on.
Practical capabilities, grounded in professional work and the projects below.
SYSTEMS VIEW01 — 04
Cybersecurity: Connected through hands-on engineering.CONCEPTUAL ILLUSTRATION
Source & runtime testing
I use static analysis, dynamic testing, and fuzzing to investigate code behavior and support practical remediation.
Threat intelligence & research
I work on a security-center project and threat-analysis tooling, connecting research and collected signals to a clearer investigation workflow.
Security in operations
I bring security into platform work through lab isolation, operational checks, access controls, and guardrails for agent-driven workflows.
PROFESSIONAL EXPERIENCE
The work behind the knowledge.
The parts of my career most relevant to cybersecurity.
Blockchain Security Analyst
- I validated hacker-submitted proofs of concept and investigated their behavior and impact.
- I used Go fuzzing to investigate denial-of-service behavior and applied static and dynamic analysis to Go and Rust code.
- My tooling included SonarScanner, Burp Suite, and Grafana, alongside security guidelines and validator checks.
Engineer, Blockchain
- I built Linux and container security lab environments to support testing and investigation.
Intern
- I supported Nessus vulnerability scanning, alert configuration, and network audits during my internship.
APPLIED ENGINEERING
Projects & systems.
Public repositories and focused overviews of my work. Explore the purpose, implementation, and contribution behind each project.
PROJECT OVERVIEWActive
Terraform cloud foundations
Infrastructure as code for my OCI and Cloudflare environment, with resources and changes kept understandable in Git.
PROJECT OVERVIEWActive
Model routing & controlled access
LiteLLM routing and Cloudflare Zero Trust around the model infrastructure used by my tools and AI workflows.
PROJECT OVERVIEWActive
Guardrails for an operations agent
Self-developed security controls around the Pinax ops-ui agent, focused on the boundary between a request and an operational action.
PROJECT OVERVIEWActive
AI development & end-to-end QA
Agent workflows and QA platforms in my environment, supporting development with code review and behavioral checks.
PROJECT OVERVIEWActive
CA Security Center
My current security-center project, alongside work on threat intelligence and static source-analysis platforms.
PROJECT OVERVIEWActive
Code & contract security analysis
Source-analysis tooling and attack-surface review, informed by my work on validator systems, bridges, minting, and smart contracts.
PROJECT OVERVIEW
NFT deployment work
NFT deployment projects informed by my blockchain engineering and smart-contract security background.
PROJECT OVERVIEWActive
Backups, monitoring & update policies
The operating layer of my environment: Grafana visibility, backups, and workload-specific decisions about updates.