I find cloud attack paths before attackers do — and build the production systems they target. Creator of an AWS IAM privilege-escalation analyzer that maps multi-hop attack chains to MITRE ATT&CK. MS in Computer Science, Rutgers University.
About Me
I'm a security engineer who came up through full-stack development — which means I attack systems the way I build them: end to end. My core work is offensive cloud security tooling, including an AWS IAM privilege-escalation engine that models policies as a state-transition graph and classifies multi-hop attack paths against MITRE ATT&CK.
That tooling instinct is backed by 3+ years shipping production software: a Moodle LMS processing 12,000+ grade records monthly at Rutgers, a housing platform for the Rutgers community, and mobile apps serving 30,000+ monthly users. I know where vulnerabilities hide because I've written the kind of code that hides them.
Skills
Security tooling first, full-stack depth behind it. Every skill below is backed by shipped project work or a verifiable certification — not just familiarity.
AWS IAM & Policy Analysis
MITRE ATT&CK Mapping
Privilege-Escalation Detection
Threat Modeling
Network Security
Security Automation (Python)
Python
JavaScript
Java
PHP
Dart
Flutter
React
HTML5
CSS3
Figma
Node.js
Flask
Firebase
PHP / Moodle
Express
MySQL
PostgreSQL
AWS
GCP
Firestore
Git
GitHub
Linux
VS Code
Experience
June 2025 — Present
School of Social Work, Rutgers University
Sep 2025 — Dec 2025
Rutgers University, Department of Computer Science
May 2025 — Aug 2025
Rutgers University, Dept. of Computer Science (Prof. James Abello)
Jan 2024 — Aug 2024
OceanmTech
Mar 2023 — Dec 2023
Fibtion
Projects
Security tooling, full-stack platforms, and production mobile applications — each project is a proof point, not a tutorial clone.
Featured Project
The challenge: multi-hop AWS IAM privilege escalation — chains like AssumeRole → PassRole → admin — is invisible to static linters and manual policy review. My solution: model policies as a formal state-transition system and run dominance-pruned BFS to surface every reachable attack path.
Key Results
Analyzes 500+ IAM policies in <2 seconds and detects 15+ escalation path types — role-assumption chains, permission pivots, cross-account trust abuse — mapped to MITRE ATT&CK TA0004
Surfaced 89 critical findings across test environments, each with a CVSS-style priority score and a ranked remediation roadmap in generated PDF reports
Interactive Flask dashboard — NetworkX attack graph with escalation edges highlighted, built for security teams to triage, not just visualize
More Projects
Housing and roommate-matching platform connecting 500+ Rutgers students. Student-only identity verification via Firebase Auth, real-time listings and messaging, and a compatibility matching algorithm — 2.1s load time, 92/100 Lighthouse performance.
Production-grade auction platform built on Node.js + MySQL with ACID-compliant concurrent bid transactions on AWS RDS. Firebase handles auth and image storage. Full seller dashboard, admin panel, and change-request workflow included.
Fully offline voice assistant with custom wake-word detection (Picovoice Porcupine) and a local GPT4All LLM for NLP — no API quota, no cloud dependency, no data leaving the machine. Automates 20+ OS tasks via Win32 APIs at sub-500ms response.
Paid client Flutter app delivering a complete e-commerce flow: onboarding, product catalogue with categories, cart with real-time Firebase sync, wishlist, and secure user profile. Optimized for smooth 60fps rendering on mid-range Android devices.
Paid client Flutter app with a complete food ordering flow: onboarding, restaurant and menu browsing, cart with live price calculation, wallet top-up, and an integrated admin portal for menu management and order tracking — all on Firebase.
No projects match this filter.
Certifications
Google Cybersecurity Professional Certificate, plus verified credentials in AI and UX from Google and Microsoft — every one independently verifiable.
No certificates match this filter.
Currently Building
Active work, ongoing research, and open opportunities.
Extending the escalation engine with passive CloudTrail correlation — detecting privilege escalation events in live AWS environments, not just static policy exports. Adding cross-account trust boundary analysis.
Graduate-level research into AWS attack surface mapping — how trust boundaries expand across GovCloud and commercial accounts through cross-account role chaining, resource-based policies, and service control policies.
Actively interviewing for Security Engineer and Full-Stack Engineer positions. Available for on-site, hybrid, or remote roles in the US. Response guaranteed within 24 hours.
Get in TouchContact
Actively seeking Security Engineer and Full-Stack Engineer roles — on-site, hybrid, or remote in the US. Recruiters and hiring managers: I reply within 24 hours, resume and references ready.
Location
New Brunswick, NJ, USA
 for Websites.jpg)
 Design.jpg)
