I'm an Application Security specialist passionate about finding vulnerabilities before attackers do, and helping teams build safer digital products.

About Me

I specialize in Application Security and DevSecOps — helping teams integrate security practices directly into the development lifecycle. I enjoy automating security checks, building secure CI/CD pipelines, and making security an enabler rather than a blocker.

Core Skills

Application Security
Penetration Testing
DevSecOps
Threat Modeling
Secure Code Review
Programming

Projects

Burp Playbook — Practical Guide to Building Custom Extensions with Python

A practical e‑book that teaches you how to build Burp Suite extensions from scratch. Clear step‑by‑step examples, runnable code, and real-world exercises to automate and improve your testing workflow.

  • Step‑by‑step extension development guide
  • Complete example code & integration tips
  • Automation techniques to speed up testing

DevSecOps Pipeline

Designed a centralized GitLab CI/CD pipeline integrating security scans, code quality checks, and automated reporting.

Security Awareness Program

Created security guidelines and training material for developers to reduce common security mistakes.

From the Blog

Why Cybersecurity Matters for Your Business

Understand how security vulnerabilities can impact your company's reputation and bottom line.

3 Security Mistakes to Avoid in Online Banking

Common user mistakes that make online banking unsafe — and how to avoid them.

Building a Secure Development Culture

How integrating security early in development helps prevent costly incidents.

Contact

Let's connect! You can reach me via email or social media.

📧 Email 💼 LinkedIn 🐙 GitHub