What I Do
Secure Architecture Design
Designing system blueprints that implement threat modeling, data encryption at rest and in transit, and strict least-privilege access controls before code is written.
Automated DevSecOps Pipeline Integration
Embedding automated security tools directly into CI/CD pipelines, including SAST, DAST, and dependency scanning to block insecure code deployment.
Secure Code Review & Remediation
Analyzing complex application codebases to identify deep architectural flaws, race conditions, or cryptographic weaknesses, and writing the precise, performant code fixes.
Threat Modeling & Risk Assessment
Facilitating structural risk workshops on engineering systems to map trust boundaries, simulate attack vectors, and prioritize engineering backlogs based on risk.
Incident Response & Defensive Tooling
Partnering with security operations to investigate active breaches, perform forensic log analysis, and build custom internal security tooling or automated patches.
How I Work
My Projects
Tinyimg
Tinyimg transforms how developers and designers handle image optimization. It delivers enterprise-grade resizing and compression directly within the browser, ensuring absolute data privacy while preserving pixel-perfect quality.
- JavaScript
- Canvas API
- Web Workers
WebsiteIsoSecu
Cybersecurity blog. Articles and insights on various cybersecurity topics.
- NextJS
- TypeScript
- Tailwind CSS
- Vercel
Citizenship Canada Mock Test
Skills
Cloud & DevOps
- Google Cloud (GCP)
- Amazon Web Services (AWS)
- Docker
- Application Security
- CI/CD
- Infrastructure as Code (IaC)
Backend & API
- Node.js
- PHP / Laravel
- .Net Core / C#
- Python
- Bash / Shell scripting
Data & Middleware
- Redis / in-memory databases
- Cloud Storage
- BiQuery
- MySQL / PostgreSQL / SQL databases
- MongoDB / NoSQL databases
- Data migrations & schema design
Frontend & UX
- Next.js / React
- Tailwind CSS
- TypeScript
Security Engineering
- Application Security (AppSec)
- Threat Modeling
- SAST / DAST Integration
- Identity & Access Management (IAM)
- Container & Cluster Security
- Secret Management (Vault / AWS Secrets Manager)