Senior Security Researcher @ Cymulate

• Architect and scale agentic security validation systems using reusable agent skills and orchestration across specialized agents.
• Develop a LangChain and LangGraph WAF validation pipeline that classifies CVEs, extracts and validates HTTP exploit payloads, and generates reproducible traffic simulations and PCAPs for security control testing.
• Research emerging attack surfaces in AI coding assistants, MCP servers, cloud infrastructure, identity systems and enterprise management products.
• Turn research findings into reproducible attack techniques and validation content for Cymulate’s Breach and Attack Simulation platform.

Vulnerability Researcher @ Cymulate

• Discovered security weaknesses in GCP’s google-guest-agent and Microsoft Entra ID Pass-Through Authentication through source review, reverse engineering and attack path analysis.
• Conducted vulnerability research into cloud services, identity boundaries and privileged guest agents.
• Designed and implemented proof of concept attack scenarios for Cymulate’s BAS platform across Windows, Linux and cloud environments.
• Built Kubernetes scanning and exploitation mechanisms for testing managed clusters and clusters deployed on premises.
• Developed tooling for Cymulate’s Attack Surface Management capabilities to identify and validate exposures across organizational assets.

Mobile Security Researcher @ Matrix

Offensive mobile security research on Android internals and mobile reverse engineering. Designed security and recruiting challenges.