● Updated Regularly
A snapshot of current focus, not a résumé. Updated as things actually change.
● Day Job
Managing Windows Server environments at CDAT — IIS, MSSQL, Active Directory, SSL/TLS certificate lifecycle, and DNS infrastructure.
● Learning
Six months into a structured roadmap — PortSwigger Web Security Academy, then OWASP API Top 10, then bug bounty writeups, then certification prep. Running in parallel with active bug bounty work on HackerOne and Bugcrowd.
● Also Learning
A parallel track — Splunk, Windows Event Log analysis, and MITRE ATT&CK — with the goal of using an offensive background as a differentiator for defensive roles too.
● Building
Self-hosted, self-deployed, self-secured — the site you're looking at right now, built and documented as it went.