About

I'm a cloud-focused Security Architect with a strong background in offensive security, penetration testing, and application security. Over the years, I've specialized in both dynamic and static analysis techniques to identify vulnerabilities — discovering more than 30 CVEs and multiple zero-day vulnerabilities along the way.

For the last few years, I've been working as a Security Architect, helping teams build secure, robust, and reliable infrastructure on the cloud — primarily on AWS. My expertise spans both security in the cloud and security of the cloud, blending application security principles with modern cloud-native defense strategies. I enjoy leveraging built-in cloud services to implement scalable, effective security controls that address real-world risks in fast-moving, dynamic environments.

I'm also a big fan of the Serverless concept, embracing its potential to drive innovation by eliminating infrastructure management overhead and optimizing scalability for cloud-native security architectures.

Academic Publications

Public Disclosures