Led development team building External Attack Surface Management (EASM) application with Python, AWS Chalice, Lambda, and Terraform. - Redesigned from single-use tool to scalable, AWS cloud-native application supporting multiple concurrent client projects. - Automated application and infrastructure deployment using Azure DevOps pipelines. - Created Docker containers and other components to collect data from various online databases such as Shodan/Censys. - Parallelized mass processing of collected data to MongoDB, handling data for thousands of hosts in minutes. - Developed backend API and authentication mechanisms using API Gateway and Cognito. - Built standardized library of code for use across the entire application, stored in Azure Artifacts. - Provided guidance and mentorship to 5 team members for professional and technical development. - Leveraged application to evaluate external security posture and identify potential attack vectors for 20+ client projects.Shipped beta version for an automated social engineering platform using Python, AWS Chalice, Lambda, and Terraform. - Developed capabilities to perform mass email, SMS, and vishing campaigns via Twilio. - Assisted with creation of mechanisms to track campaign metrics and store them to be consumed by clients via API. - Generated custom campaign pretexts and phishing website content for multiple client projects. - Leveraged existing code from the EASM platform to reduce time spent deploying infrastructure, developing backend API(s), and integrating with AWS Cognito by 2 months.Performed penetration testing for a variety of clients, including network, physical, and wireless testing.Expanded the use of Agile methodologies using Azure DevOps within the broader 40+ person Offensive Security team. - Built out processes and procedures for roadmap creation, sprint planning, and regular stand-up meetings.

Created Beacon Object File (BOF) kit for Cobalt Strike using C and inline x86 Assembly. - Implemented code to counter Windows defense mechanisms, such as AMSI and ETW, using direct system calls (syscalls). - Improved the HellsGate / HalosGate technique for direct syscalls via ntdll.dll to bypass detection by Cylance EDR.

Developed Terraform scripts to automatically deploy Layer 4 (VPC) and Layer 7 (WAF) network security capabilitiesEngineered repository copy mechanism via AWS ECS, Lambda, and CodeCommit.Wrote code to pull threat actor data from an internal feed and display within a reconnaissance tool.

Researched security vulnerabilities in connected cars by blending Automotive Grade Linux (AGL) with OP-TEE.Worked on securing code randomization for IoT devices using ARM TrustZone to protect against code reuse attacks.

- Assist students with course material and C/x86 Assembly coding assignments by hosting office hours- Instruct students in the core concepts of data structures and algorithms to help prepare them for technical interviews

Produced Python Flask API and Angular GUI for the execution of bulk actions in internal access request tool.

Worked on a tool using an expectation maximization (EM) algorithm to determine what types of HPV may be contained in a particular patient's genome

Automated server workflows and release development cycles using Chef, Jenkins, and Salt.