0x6a03448f4d
I know that I
know nothing.
I am a passionate cybersecurity student specializing in Application Security and Penetration Testing. With a proactive mindset, I thrive in collaborative environments and embrace continuous, lifelong learning.
My focus lies in breaking and securing systems, building robust automation tools in Python, and experimenting with how artificial intelligence can drastically enhance vulnerability discovery and exploitation workflows.
> Actively targeting: AppSec, Pentesting, Red Team, and AI-Security oriented roles.
Experience
AI Penetration Testing Project
10/2025 - 06/2026- Developing AI-driven penetration testing agents using Python and large language models (LLMs).
- Automating reconnaissance, exploitation, and reporting processes for web applications.
- Designing workflows with LangChain and LangGraph, focusing on state management and reliability in security testing environments.
- Applying academic knowledge to solve practical cybersecurity challenges in a real company context.
Application Security Engineer Intern
06/2025 - 09/2025- Supported integration of SSDLC principles to ensure security throughout the development lifecycle.
- Worked with SAST tools and integrated security checks into CI/CD pipelines using GitHub Actions.
- Developed a Python script for vulnerability triage, automating analysis and prioritization to reduce manual effort and improve accuracy.
- Collaborated in Agile teams, enhancing communication, problem-solving, and security-driven workflows.
Education
MSc Information and Cyber Security
Royal Holloway, University of London
Postgraduate studies in information security, deepening my focus on application security, offensive security and AI-driven security testing.
Bachelors Degree Cybersecurity
Iscte
Developed skills in cybersecurity, including threat detection, risk assessment, secure networks, encryption, and ethical hacking.
Certifications
- [01]SOC Analyst (HackTheBox Job role Path)
- [02]CTI Certification @ arcX
- [03]Cyber Threat Intelligence 101 (arcX)
- [04]Introduction to Cybersecurity (Cisco Networking Academy)
- [05]EF SET English Certificate (C2 Proficient)
- [06]IELTS Certificate (Band 8)
Arsenal
Offensive / Application Security
Blue Team / Defense
Development & Engineering
Emerging Technologies
Deployments
headers
Security header & posture scanner
A security-header and posture scanner that grades any site's HTTP defenses - a deep Content-Security-Policy evaluator, plus TLS, cookie, CORS, DNS/email (SPF/DKIM/DMARC/MTA-STS) and WHOIS checks, with copy-paste fixes for every finding. Every scan runs server-side behind strict SSRF protection - scheme/port allow-listing and IP-pinning that closes DNS-rebinding - is rate-limited, refuses internal, government and special-use targets, and stores nothing. Ships an embeddable, server-signed grade badge.
headers - Security header & posture scanner. Deployment 1 of 6.
drag, arrow keys, or click a card behind // provisioning next vhost…
Field Notes
Security Writeups & Research
A collection of my thoughts, vulnerability research, and penetration testing walk-throughs documented in a secure, static environment.
./access_notes.sh