CV

GPA 3.36 (Dean’s List) · Minor in Military Science (Army ROTC)

Security-based coursework: Computer Security, Network Security, Software Security, C Programming, Cybersecurity Practicum, Operating Systems, Computer Organization & Assembly, Data Structures & Algorithms

• Designed and shipped autonomous, AI-driven security tooling for Pendo’s product-security and bug-bounty programs.
• Architected a multi-agent pentesting system using Google ADK, Python, and Claude that reproduces 50+ open bug-bounty reports against production.
• Engineered an LLM triage agent with live httpx, shell, and Playwright browser tools plus a deterministic Python classification engine, cutting regression verification from 3 hours to under 10 minutes per report.
• Deployed on GCP Cloud Run / Scheduler with GCS state and Secret Manager, auto-pinning regressions to a Slack digest and surfacing 10+ silent regressions on tickets marked “resolved.”
• Built an n8n pipeline with Claude and Gemini agents for supply-chain risk management on dependency additions in GitHub, clearing 200+ packages across 30+ PRs with zero false positives while saving 20 min/PR.

• Commissioned into the 17A Cyber Warfare Officer role with the Defensive Cyber Operations Engagement at Joint Force Headquarters, training across threat intelligence, incident response, and cyber defense trend analysis.
• Served as Battle Captain for a live-fire ICS incident response during Exercise Cyber Shield, directing blue-team detection and response across industrial control systems with Security Onion, an Elastic SIEM, and MITRE ATT&CK.

• Supported cyber operations and threat prevention for military aircraft systems in a NIST RMF / 800-53-governed DoD environment.
• Authored an OSINT report on the MQ-9 Reaper drone published to higher command and delivered a reusable red-team cyber-tabletop framework.

• Built an automated vulnerability-research tool to assess a vulnerable npm package’s supply-chain risk by discovering exploitable flaws through their downstream dependents.
• Engineered a 6-stage pipeline fusing LLM-driven exploit generation with CodeQL static analysis and reachability tracing to produce validated PoCs for command injection, path traversal, prototype pollution, and ReDoS.

• I was getting tired of waiting 10+ minutes for enumeration during OSCP labs and I wanted to learn bash, so I wrote a two-stage TCP/UDP nmap scanner that cuts enumeration time from 20+ minutes down to around 3.
• Stage 1 sweeps all 65,535 ports fast with no scripts and prints the open ports immediately; Stage 2 then runs -sC -sV against only the ports each host actually has open — so I can start enumerating services while the deeper version/script scan is still running.

• Built a single-file Python credential-spraying CLI wrapping NetExec to spray credentials across SMB, LDAP, WinRM, RDP, SSH, and MSSQL/MySQL/PostgreSQL, automating default-credential enumeration.

• Built a Python CLI that auto-generates Kubernetes manifests, Dockerfiles, and YAML to stand up ready-to-deploy security lab environments.