01
Application security
Manual review, threat modeling, control design, and remediation guidance for product teams.
02 / About
Security should change how a system is built, not just how it is scored.
I am an application security engineer at Warner Music Group, based in New York. I work across product security, offensive testing, DevSecOps, and the systems that turn findings into measurable risk reduction.
My approach starts with technical depth and ends with a path teams can act on: concise evidence, realistic prioritization, and tooling that fits the way software is actually shipped.
02
Offensive validation
Web, cloud, and infrastructure testing that follows real attack paths and proves impact.
03
Security engineering
Automation and platform work that make repeatable security checks part of delivery.
Experience
From finding vulnerabilities to building the program around them.
Enterprise application security, consulting, research, and secure software engineering.
Warner Music Group
CurrentCybersecurity Engineer II / Application Security
Mar 2024 - Present
New York, NY
- ›Established and scaled WMG's application security program, protecting business-critical systems supporting approximately US$7 billion in revenue across 50 territories.
- ›Architected DevSecOps workflows spanning SAST, secret scanning, DAST, and security-as-code pipelines.
- ›Built a multi-tenant risk platform that unifies security data into one operational view.
Google Cybersecurity Clinic
Security Engineer Intern
Aug 2023 - Jan 2024
New York, NY
- ›Delivered penetration testing, social engineering, and authentication analysis for five organizations through Google's US$20 million cybersecurity initiative.
- ›Improved vulnerability remediation workflows and built Python pipelines for security event data.
- ›Translated technical findings into prioritized guidance for small-business and nonprofit stakeholders.
IBM
Cybersecurity Engineer Intern
May 2023 - Aug 2023
Armonk, NY
- ›Ran security and privacy reviews across machine learning and cloud workloads.
- ›Contributed to threat modeling and privacy-aware federated learning initiatives.
- ›Worked across security and engineering teams to turn findings into production hardening.
TryHackMe
Penetration Tester Intern
May 2021 - Dec 2021
Remote
- ›Built vulnerable environments used to train more than one million cybersecurity learners.
- ›Performed vulnerability assessments and developed realistic attack scenarios.
- ›Created Python tooling to support reconnaissance, discovery, and exploitation workflows.