AWS Certified Solutions Architect – Professional with hands-on experience in cloud infrastructure hardening, penetration testing, and CTF challenge engineering. I combine an offensive security mindset with practical systems administration.
Manage network and cloud infrastructure; enforce access control via Active Directory Group Policies, monitor B2B site traffic and audit access patterns via OCI Logging, and handle L1/L2 Jira ticket support.
Architected cloud email delivery infrastructure (cut costs 15%) and hardened domains with SPF/DKIM/DMARC; contributed to secure development of company's B2B commercial web platform.
Feb – Oct 2025
KnockOn
Challenge Developer & Technical Mentor
Engineered 10+ CTF challenges on real-world CVEs (OWASP Top 10, privilege escalation, SSRF) for 3 cohorts — 73% avg solve rate.
Mentored trainees weekly on web exploitation, network traffic analysis, and vulnerability remediation.
03
Projects
CyberShield — Web Security SaaS Platform
Jan – Jun 2026
Production SaaS that scans websites for ~60 security vulnerabilities across SSL/TLS, HTTP headers, email auth (SPF/DKIM/DMARC), open ports, malware reputation, and source code flaws. Built with FastAPI on Railway, Supabase PostgreSQL + Auth, and Vercel. Parallel async scan engine returns results in 5–15 seconds; real-time dashboard via Supabase WebSocket; 3 subscription tiers (Free / Plus $19 / Max $49).
Hack MAC 2025 — CTF Challenge Development & Infrastructure
Jul – Oct 2025
Co-engineered 38 CTF challenges (web, crypto, forensics, OSINT, rev eng) for a Macquarie University competition across 3 academic levels. Containerised web challenges with Docker; wrote Python tooling to auto-generate JSON/Markdown inventories tracking paths, categories, difficulty, and deployment status.
PythonDockerWeb SecurityOSINTRev EngCryptography
Source under NDA — write-up available on request
Penetration Test — LAMP Bulletin Board System
Jan – Feb 2025
Black-box pentest of a self-built LAMP web app. Identified 11 vulnerabilities including critical RCE via file upload, SQLi auth bypass, stored XSS, IDOR, and session fixation. Delivered a structured report with CVSS-style ratings, PoC steps, and patched code for each finding.
