Application Security Engineer
Application Security Engineer coming from 6+ years of software engineering. I focus on DevSecOps and cloud security - SAST/DAST, CI/CD security, APIs, SBOMs, and threat modeling - and I care about turning that work into less risk, lower cost, and cleaner operations.
Security engineering work and shipped products.
Pipelines, pentesting, cloud hardening, and supply chain.
Built a secure CI/CD pipeline with SonarQube, OWASP ZAP, and Syft/Grype. Critical vulnerabilities across builds dropped about 53%, and insecure deployments get blocked automatically.
Hardened an API with JWT, RBAC, rate limiting, and audit logging - unauthorized access attempts fell about 33% in testing. Ran pentests with Burp Suite and ZAP, then closed every high-severity finding.
Set up SBOM workflows with Syft and Grype - dependency vulnerabilities dropped about 35%. Risky packages get caught in CI before they reach production.
Apps and platforms I built end-to-end - mobile, web, and hybrid.
WebJob application platform that researches each employer, suggests honest gap fixes from your real experience, tailors your resume and cover letter, then auto-fills Greenhouse, Lever, and other ATS forms for your review - you click submit last.
WebPublic water data trust layer - independent lead results are cryptographically sealed at submit time, published automatically, and alerted at 5 ppb (community) and 10 ppb (legal) so dangerous numbers cannot be quietly edited or delayed.
MobileLaunched as CMU TalentHub on iOS and Android - now rebranded to VeriTalent. Students showcase portfolios and verified skills, discover internships and gigs, and connect with businesses and faculty. Built and pitched at CMU's New Venture Challenge.
Communities and leadership outside day-to-day engineering.
President
Grew membership by about 30% and ran hands-on labs on AppSec and Capture the Flag.
Researcher
Built a Nuclear Reactor Simulator to show why cybersecurity matters in nuclear systems, and wrote a research paper on cybersecurity awareness.
LeaderShape Institute Program
Completed an intensive leadership program focused on vision-driven problem-solving and ethical decision-making.
Founder
Pitched at CMU’s 2026 New Venture Challenge in front of entrepreneurs and business leaders - technical build plus customer discovery, communication, and execution.
Application Security Engineer transitioning from 6+ years of software engineering. I'm finishing an MBA in Cybersecurity (GPA 3.85), with a focus on DevSecOps and cloud security - SAST/DAST, CI/CD security, API security, SBOM, and threat modeling.
I code in JavaScript and Python. People know me for turning technical work into cost savings, risk reduction, and operational efficiency - including remediation that actually sticks.
Six-plus years of software engineering, now focused on application security.
Five minutes on stage, five minutes of hard questions. I pitched Talent Hub and placed fifth at CMU's 2026 finals in Grawn Atrium, Mount Pleasant, MI.
Pitched at NVC as Talent Hub. Launched as CMU TalentHub on iOS and Android - now VeriTalent for portfolios, campus jobs, and secure messaging across the CMU community.
Jobs & gigs
Secure messaging
Showcase talent
Onboarding
Discover
A semester of building, pitching, revising, and showing up.
Students had skills employers couldn't see. I started building around verified talent and campus-specific opportunities.
Mentor meetups and NVC workshops - tightened the pitch and stress-tested the model before going live.
Submitted the application and moved through preliminary judging as one of seven finalist teams.
Five minutes on Talent Hub at Grawn Atrium, then five minutes of judge questions.
Networked with judges, mentors, and peers while results were finalized.
Finished fifth in a strong cohort - validation that the idea held up against serious competition.
Current GPA 3.85. Focused on DevSecOps and cloud security - how security work turns into lower risk, lower cost, and better operations.
Honors degree built around cybersecurity fundamentals - secure system design, threat analysis, and hands-on security engineering.