University of Maryland, College Park

Master of Engineering in Cybersecurity [Minor: Cloud Engineering]

Security Engineer, YSecurity.io

• Architected and deployed enterprise identity and access management solutions using Okta SSO integrations, designing Okta Workflows for automated user provisioning, access reviews, and security policy enforcement across multi-client SaaS environments
• Implemented endpoint security and device management infrastructure using CrowdStrike Falcon for threat detection, Traceforce for compliance automation, and MDM platforms (Jamf, Addigy) for macOS fleet management and security posture hardening
• Execute penetration testing and security assessments across multi-client environments including network pentesting, Active Directory exploitation, and threat hunting while supporting SOC 2 and ISO 27001 compliance through vulnerability management and GRC operations
• Integrate security into client DevSecOps pipelines through SAST/DAST tool deployment, CI/CD security scanning, and risk-based vulnerability prioritization using CVSS and threat intelligence feeds

Cybersecurity Analyst, Community Dreams Foundation

• Execute hands-on web application penetration tests using Burp Suite and OWASP ZAP, discovering and chaining SQLi, XSS, IDOR, and authentication bypass vulnerabilities to demonstrate real-world exploit scenarios for non-profit organizations
• Perform post-breach forensic analysis and incident reconstruction, reverse-engineering attacker TTPs to identify security control failures, WAF/IDS evasion techniques, and lateral movement paths used in actual compromise scenarios
• Conduct compliance-driven penetration testing aligned with PCI-DSS requirements and ISO 27001 control families, validating access control implementations, network segmentation, and data protection mechanisms through offensive testing methodologies

Security Operations Center Analyst, University of Maryland Police Department

• Validated and improved SIEM detection logic by 30% by executing known TTPs using Metasploit and PowerSploit against a live lab to test Active Directory lateral movement detection
• Authored adversary emulation plans based on MITRE ATT&CK to test SOC response and Tines (SOAR) playbook effectiveness
• Collaborated with SOC analysts to hunt for APTs, applying an attacker's perspective to log correlation (Active Directory, Wireshark) to uncover hidden attack chains

Project Engineer — Cybersecurity Specialist, Wipro Technologies

• Simulated adversary activity against AWS cloud infrastructure (targeting GuardDuty, Security Hub) to validate cloud detection capabilities
• Conducted penetration tests on live AWS environments, identifying critical data exposure risks via misconfigured S3 buckets and EC2 instances

Security Engineer, Ignited Sparks

• Executed web application penetration tests (Burp Suite, Nessus), documenting complex exploit chains for SQLi and XSS
• Conducted post-breach analysis, re-creating attacker exploit chains to identify failed security controls and WAF/IDS rule gaps
• Executed penetration tests based on ISO 27001 & PCI-DSS control families