~/work
OWASP Nest
June 2026 – presentSoftware Engineer Intern · Remote
- 23 PRs on OWASP Nest (18 merged, 5 open) across Django/GraphQL backend, TypeScript frontend, Terraform/AWS infra, and GitHub Actions CI.
- AWS/Terraform: split bootstrap state by environment (#5205), migrate runtime secrets from SSM to AWS Secrets Manager (#5141), and ship dependabot security remediation (#5365, #5370).
- Backend: multi-category event filtering on list_events (#4144), Algolia cache_key collision fix for concurrent search (#3825), Django entity model cleanup (#3793); open — Sponsors Program (#4520), Slack reaction moderation (#5034).
Mine2.io
May 2026 – July 2026Security Research Intern · Remote
- Validated deception mines across Arch Linux, CentOS, Windows, and Docker Ubuntu — deployed 15 active mines, ran attacker-style triggers (aws sts, psql, mongosh/pymongo, ssh, strace, kubectl), and documented pass/fail outcomes in a master test matrix.
- Benchmarked mine2 against Canarytokens.org and Tracebit; ran M2Fortify quality scans (36 checks, 142 findings) and mapped capabilities to NIST CSF 2.0 to prioritize trigger bugs and product gaps.
Filmylog
Feb 2026 – PresentFlutter Developer · Remote
- Architected and shipped a real-time websocket chat subsystem from scratch — full event protocol, server-side handlers, and flutter client integration, delivered as a single-owner implementation.
- Integrated 20+ rest apis spanning auth, home feed, search, and chat flows, handling full request lifecycle from postman contract verification through flutter client wiring