• • Improvement and creation of static analysis rules for CodeQL and Semgrep, to expand vulnerability coverage and reduce false positives.
• Practical application on open‑source projects (Samsung MagicInfo, WordPress plugins, RagFlow), leading to the discovery of zero‑day vulner‑ abilities and CVE assignments (e.g.: CVE‑2025‑5487).
• Contribution to penetration testing engagements for various clients, complementing the research work.

• Discovered and reported numerous vulnerabilities, including critical ones, to known companies such as Visa and VFS Global.
• Got rewarded for my findings and have been assigned many CVEs, which let me gain a lot of experience with real world products.

Responsibilities include:

• Analysing
• Modelling
• Deploying
• Automating
• Maintaining

• Carried out many technical tasks related to Security, Web Development, and IT automation.
• Had contact with real clients and solved real-world issues.

• Managed a team of a lot of developers, and created a lot of dev projects and events websites.
• Organized a lot of events and workshops.

• Managed a team of a lot of developers, and created a lot of dev projects and events websites.
• Organized a lot of events and workshops.

• Prepared content for the cyber security bootcamp and learned how to redact technical content.

• Performed penetration testing on commercial websites, whether it was a black, gray, or white box.
• Interacted with actual products, experiment with their features, and apply the security principles learned.

• Organized many CaptureTheFlag competetions and workshops.
• Creating Web exploitation and Cryptography challenges for the CTFs.