My journey in cybersecurity started in 2017 with vulnerability assessments and penetration testing across web applications, mobile platforms, networks, and infrastructure. At PwC, I expanded into Operational Technology (OT) security, conducting security audits for a large petrochemical organization in the Middle East and working within highly restricted environments where traditional assessment approaches had to be adapted. I also developed VBA-based automation to improve evidence collection and analysis under these constraints.

I later moved into deeper security research at Riscure, working on embedded systems, secure boot, Trusted Execution Environments, and hardware security, including voltage, electromagnetic, and laser fault injection. From there, I returned to broader offensive security consulting, working across web, mobile, infrastructure, cloud, and red team engagements, while developing custom exploits and tooling to demonstrate real-world impact.

Today, I work as a Senior Security Tester in the banking sector, focusing on red teaming, Active Directory, lateral movement, cloud and application security, and adversary simulation. Across this journey, the focus has remained consistent: understand technology deeply, think like an attacker, adapt to the environment, and build or develop whatever is necessary to uncover and demonstrate real security weaknesses.