Application Security Engineer
Security engineering,
from code to operations.
I work in application security — threat modeling, secure code review, and building security tooling that helps engineering teams ship confidently. Currently expanding into security operations by building a home SOC lab from scratch and documenting the journey.
Core skills
Projects
Home SOC Lab
Building a full security operations stack from scratch — Security Onion, Wazuh, Sysmon, Atomic Red Team, TheHive, MISP, and Velociraptor — all free, all open source. Documenting every component as it goes live.
Application Security Engineering
Day-to-day work spanning threat modeling, secure SDLC integration, security automation tooling, and working directly with engineering teams to build security into software from the start.