I am an offensive security engineer who works across both red-team operations and application security. Currently pursuing a Master’s in Cybersecurity at the University of Maryland, I split my focus between simulating real-world adversaries across enterprise networks and breaking web applications at the source-code level.

My professional experience is anchored at Deloitte USI. On the application security side I do white-box source-code review and web application penetration testing, tracing untrusted input from entry point to dangerous sink and chaining flaws such as SQL injection, IDOR, insecure deserialization, and SSTI into reliable, multi-stage exploit chains that reach remote code execution. On the red-team side I run engagements covering Active Directory exploitation, privilege escalation, lateral movement, and AV/EDR evasion across enterprise networks, building custom tooling and payload-automation frameworks to bypass modern defenses and emulate real-world threat actors with precision.

Alongside both, I research AI security, including AI red-teaming, prompt-injection analysis, and model exploitation, and I build multi-agent pipelines that probe the robustness of LLM-powered systems and map their failure boundaries.