Developer @Razz Security
Backend infrastructure, code review, training content, and offensive security research.
I work at the point where engineering discipline and offensive security overlap. At Razz Security, I build backend infrastructure, review code with a security-first lens, and develop training content grounded in real attack paths. Outside work, I spend most of my time on CTFs, lab design, adversarial research, and systems work that sharpens both operator instinct and engineering judgment.
- Building backend infrastructure, reviewing code, and designing secure engineering workflows that hold up under scrutiny.
- Translating asset maps, trust relationships, and attack paths into focused offensive plans across Linux, Windows, networks, and Active Directory.
- Developing labs, internal tools, and repeatable workflows that make offensive techniques practical to teach and apply.
- Designing Marionette, an OSCP-style boot-to-root VM built around a realistic mapped attack chain.
- Founding a 50+ member college security community, delivering workshops, guest lectures, industry speakers, and 150+ training modules.
- Shipping 3+ Unity games end-to-end, reaching Pro Hacker on HTB (Season 10 Ruby top 20%) and placing in the TryHackMe top 1%.
|
|
|
|
| eCPPT | CEH | CEH Practical | eJPT |
A Public Key Infrastructure and Certificate Lifecycle Management Home Lab walkthrough, featuring EJBCA by Keyfactor |
An OSCP-like boot2root CTF challenge |
|
Linux rootkit analysis and low-level research lab focused on stealth, persistence, and forensic visibility |
Yet another SoC lab |
Improved navbar-search contrast over light announcement banners in the Kubernetes documentation site — created, reviewed, and merged upstream. 
|
Experimental Linux support, research tooling, and Arch packaging for FPC Disum 10a5:9200 fingerprint sensors. 
|
Created a standalone localization example with a Spanish translation catalog, language switching, interpolation, pluralization, and browser coverage. 
|
