Shorborno Holdings Ltd. - Offensive Security Engineer

WeCare Education - Cyber Security Consultant

GenCourse - Security Researcher

Frontend Web developer

University of the People, USA

Bachelor of Science in Computer Science

Harvard University

CS50 Course - Introduction to Computer Science

Ethical Hacking, Cybersecurity and IT

Self-Study

Web Development

Self-Study

Linux

Arch, Kali, Parrot, Blackarch, Amazon Linux, RHEL, Ubuntu, Debian, Fedora, Manjaro, Lubuntu

Windows

Windows 7, 10, 11

C

Python

Java*

SQL

Bash

PowerShell*

HTML

Markdown

Fundamental

Strong base in computing, networking, and virtualization, aligned with certifications like CompTIA Security+, ISC2 CC, and CNSP. Skilled in Hyper-V, AWS, Azure, and GCP, with knowledge of ISMS frameworks and compliance through ISO/IEC 27001:2022 Lead Auditor.

Offensive Security

Hands-on experience in web app & network security, reconnaissance, exploitation, and privilege escalation, backed by CAP, APIsec Practitioner, CPTS, CWL Red Team Analyst, and CRTA. Practical knowledge in AD attacks and vulnerability assessments through HTB Pro Labs and CySA+ training.

Defensive Security

Proficient in threat frameworks (MITRE ATT&CK, Cyber Kill Chain, Diamond Model), SOC operations, SIEM/SOAR, and endpoint monitoring with tools like Splunk, Wazuh, and Sentinel. Experienced in traffic analysis, IDS/IPS, and DFIR workflows using Autopsy, Redline, KAPE, and Volatility. Certified through SC-200, Google Cybersecurity Professional, and THM SOC L1.

Cloud Security

Specialized in securing workloads across AWS, Azure, and GCP, validated by Google Professional Cloud Security Engineer, AWS Solutions Architect, and SC-200 certifications. Knowledgeable in compliance (ISO 27001, SOC 2, GDPR) and cloud-native security tools (GuardDuty, Sentinel, GCP SCC).

DevSecOps & Automation

Focused on container and pipeline security with Docker, Kubernetes, and GitHub Advanced Security. Experienced in CI/CD security, IaC with Terraform, and policy-as-code for secure multi-cloud deployments.

Tools & Platforms

Comfortable with a wide range of tools across offensive (Nmap, Burp Suite, Metasploit, BloodHound), defensive (Wireshark, Snort, Zeek, Splunk, Wazuh), DFIR (Autopsy, Volatility, KAPE), and cloud-native SIEM/EDR platforms. While tools are important, they can always be learned; what matters most is the underlying methodology, problem-solving mindset, and adaptability in applying them effectively.

Architected C2 Redirector with Cloudflare

Designed and implemented a stealthy command-and-control infrastructure leveraging Cloudflare's global network to mask traffic and evade detection.

Developed Custom Kernel Modules for Untraceable C2

Developed a proof-of-concept kernel module to demonstrate advanced persistence techniques at the deepest level of the Linux operating system.

CVE-2023-22809 PoC

A proof-of-concept exploit targeting CVE-2023-22809, demonstrating the vulnerability, impact, and potential attack vector in a safe and controlled environment for research and educational purposes.

Reconnaissance & Scanning Tools

Developed custom tools including a Subdomain Enumerator, Port Scanner, Web Crawler, XSS Scanner, Directory Buster, GitHub Scraper and API Fuzzer to automate discovery and vulnerability identification.

File Integrity Monitor

A monitoring tool that tracks and logs changes to files, directories, or system binaries to detect unauthorized modifications, malware injections, or insider threats.

Honeypot

Honeypot is a Python-based tool utilizing Scapy to detect and log port scanning activities on a network.

Additional Projects

A full portfolio of projects is available on my GitHub: github.com/Toothless5143