I’m a Senior Information Security Engineer with 3+ years of experience helping businesses find and fix security gaps before attackers do. I work on both sides of security: attacking systems to expose weaknesses, and defending them through monitoring and incident response. My core work is Web and API penetration testing. I go beyond automated scans and test for authentication and authorization flaws, input validation issues, and business logic weaknesses that tools often miss. Every finding comes with clear, practical remediation steps your developers can act on. Day to day, I run threat detection and incident response with SentinelOne EDR and Wazuh SIEM, and I support ISO/IEC 27001:2022 audits, policy development, and compliance readiness. I have also led the development of an Attack Surface Management platform and mentored aspiring penetration testers, so I can explain security in terms both technical teams and decision-makers understand. Book a session with me if you want to: Get your web app or API tested before launch Understand your attack surface and what’s exposed Prepare for an ISO 27001 audit Build or improve your incident response and monitoring Start or grow a career in cybersecurity Let’s make your business harder to breach.