Independent Cybersecurity Consultant & Senior Penetration Tester

In-depth manual security assessments of complex web platforms, SaaS applications, and enterprise portals—uncovering authentication flaws, multi-tenant isolation bypasses, and server-side vulnerabilities that automated scanners cannot detect.

• Authentication, SSO (OAuth 2.0 / OIDC / SAML) & MFA workflow security
• Horizontal & vertical authorization boundaries (IDOR / BOLA / BFLA) and multi-tenant isolation
• Business logic abuse, race conditions & workflow state bypass
• Injection vulnerabilities (SQLi, NoSQLi, XXE, SSTI, OS Command Injection)

Rigorous manual testing of RESTful, GraphQL, and microservice APIs focusing on object-level authorization, token validation, mass assignment, and business logic abuse across web and mobile backends.

• REST API & GraphQL endpoint security auditing
• Broken Object Level Authorization (BOLA / IDOR) & Broken Object Property Level Authorization (BOPLA / Mass Assignment)
• API authentication mechanisms (JWT, OAuth 2.0 bearer tokens, API keys, mTLS, HMAC signatures)
• Rate limiting, resource exhaustion, batching abuse & automated scraping defenses

Comprehensive static, dynamic, and runtime instrumentation assessments of Android and iOS applications—evaluating client-side binary protections, local data storage, transport security, and backend API interactions.

• Android (APK/AAB) & iOS (IPA) static binary analysis and reverse engineering
• Dynamic runtime analysis and method hooking (Frida / Objection runtime instrumentation)
• Local data storage, cache, memory dump, and Keystore/Keychain security evaluation
• Network communication, TLS configuration, and certificate pinning bypass resistance

External perimeter and internal network penetration testing designed to identify exposed services, segmentation weaknesses, privilege escalation vectors, and multi-hop lateral movement paths across corporate infrastructure.

• External perimeter reconnaissance, port/service interrogation, and vulnerability validation
• Internal network penetration testing (assumed-breach or segmented foothold scenarios)
• Network segmentation and firewall boundary verification across VLANs and DMZs
• Service misconfigurations, default credentials, and protocol-level attacks (SMB, SNMP, LDAP, Kerberos, NFS)

Targeted identity and domain security assessments focused on uncovering Active Directory attack paths, Kerberos delegation flaws, ACL/GPO misconfigurations, and privilege escalation chains—paired with practical detection and hardening guidance.

• Active Directory attack-path mapping and privilege escalation chain analysis
• Kerberos authentication security (Kerberoasting, AS-REP Roasting, delegation abuse, ticket manipulation)
• Access Control List (ACL), Group Policy Object (GPO), and administrative tiering evaluation
• Active Directory Certificate Services (ADCS) & domain trust relationship security

Pragmatic technical risk assessments, security posture reviews, and remediation governance that bridge the gap between deep offensive findings and executive security decision-making.

• Application and infrastructure security posture reviews
• Architectural threat modeling for new platforms, APIs, and multi-tenant systems
• Technical risk assessment and exploitability-driven backlog prioritization
• Defense-in-depth control evaluation (authentication architecture, network segmentation, secrets management)