Security Engineer @ SproutXP
Breaking things on purpose, so nobody else can.
- 🛡️ Security Engineer at SproutXP, working across application security, cloud security, and offensive testing.
- 🔎 I spend my days on penetration testing, vulnerability research, threat modeling, and secure code review.
- 🤖 Big believer in security automation — if I do it twice manually, I script it.
- 📚 Always learning: exploit development, cloud attack paths, and detection engineering.
- 💬 Ask me about AppSec, red teaming, DevSecOps, or hardening CI/CD pipelines.
Languages
Security
Cloud & Infra
| Area | Focus |
|---|---|
| 🕵️ Offensive Security | Web, API, and network penetration testing |
| 🧪 AppSec | Secure code review, SAST/DAST, dependency risk |
| ☁️ Cloud Security | IAM hardening, misconfiguration hunting, attack paths |
| ⚙️ DevSecOps | Shifting security left in CI/CD pipelines |
| 📈 Detection | Logging, alerting, and incident response tooling |
"Security is not a product, but a process." — Bruce Schneier