Curriculum vitae

Second placement, focused on web application security: reviewing applications, reproducing findings and turning them into reports someone could act on.

• —Assessed web applications for common classes of vulnerability, working from an agreed scope and a written methodology
• —Reproduced and documented findings with a clear impact statement and a minimal proof of concept
• —Wrote remediation guidance aimed at the developers who would implement it, not at other security people
• —Retested fixes and closed findings only once the underlying cause was addressed

First placement. Broad exposure: how a security team actually operates day to day, and how the work is organised before anyone touches a tool.

• —Supported assessments by handling reconnaissance and information gathering within scope
• —Set up and maintained lab environments used to reproduce issues safely
• —Reviewed configurations against hardening baselines and documented the gaps
• —Kept internal documentation current as procedures changed

Hackuten is a capture-the-flag platform covering several areas of cybersecurity — web, reverse engineering, cryptography, forensics and more. It exists to make the first steps into the field less discouraging: challenges that teach something specific, in an order that makes sense, with infrastructure that does not get in the way.

Next.js · TypeScript · TailwindCSS · PostgreSQL · Docker · Linux · REST API

Orbyte is an encrypted messaging application in the spirit of Session: private conversations that do not require a phone number to start, and a server that is designed to know as little as possible. It is in active development — the parts that are built are built carefully, and the parts that are not are honestly labelled as such.

TypeScript · React · Next.js · Node.js · PostgreSQL · Docker

Batelys protects people who work alone. You check in when you arrive, then press a button now and then to confirm you are fine. Miss a check-in — because you fell, collapsed, or simply cannot reach your phone — and an alert leaves on its own, with your position, escalating through your chain until someone responds.

TypeScript · Next.js · React · Node.js · PostgreSQL · REST API · Docker