[ clearance: top-secret (fictional) ] uptime: 9 years

I break things
so others can't.

./view_projects ./contact --secure

9+years in the trenches

200Musers protected

140+vulns disclosed

#7global bounty rank

ls ./projects

Things I've built and broken. All fictional for the demo. Swap in your own.

Sentinel

rust / kafka / ml

Threat detection pipeline scoring 4M auth events per second. Flags credential stuffing in under 300ms. Account takeovers down 71%.

Vaultline

go / mtls / kms

Zero-trust secrets service. Short-lived creds, automatic rotation, adopted by 400 internal teams.

Fuzzforge

c++ / llvm / k8s

Continuous fuzzing wired into CI. Caught 38 memory-safety bugs in parsers before they shipped.

Redline

python / att&ck / aws

Adversary-simulation framework mapped to MITRE ATT&CK for quarterly purple-team exercises.

Pathwatch

typescript / neo4j / iam

Graph of cloud permissions showing how one stolen token reaches production customer data.

tlsprobe

go / open source

CLI that audits TLS configs across a fleet. 3.2k stars, featured in two conference workshops.

cat advisories.log

Fictional disclosures with placeholder IDs. Hover the redacted bits.

ID	Severity	Finding	Bounty
CVE-DEMO-001	CRITICAL 9.8	Pre-auth RCE in a major cloud gateway via request smuggling	$50,000
CVE-DEMO-002	CRITICAL 9.1	OAuth redirect bypass leading to full account takeover	$35,000
CVE-DEMO-003	HIGH 8.2	Heap overflow in an image parser reachable from a mobile messaging app	$20,000
CVE-DEMO-004	HIGH 7.5	SSRF to cloud metadata service in a webhook feature	$12,000

git log --career

Company names are fictional placeholders.

2023..HEAD

Staff Security Engineer

Halcyon Cloud

Lead application security for the identity platform. Own the threat model, bounty triage, and secure-by-default libraries used by 3,000 engineers.

2020..2023

Senior Software Engineer

Northwind Systems

Built payment services moving $2B a year. Put threat modeling into design reviews and led the zero-trust network migration.

2017..2020

Software Engineer

Vantage Labs

Full-stack and infra. Switched to security after leading incident response on a major breach at 3 a.m.

which --all

Builder first, breaker second.

build

Rust, Go, TypeScript
Python, C++, SQL
Distributed systems
Kubernetes, Terraform

attack

Pentesting, red teaming
Fuzzing, reverse engineering
Burp, Ghidra, Metasploit
Exploit development

defend

Threat modeling
Detection engineering
Incident response
Zero trust, IAM, crypto

OSCPCISSPGIAC GPENAWS Security SpecialtyCKSCTF: top 10 DEF CON qualifier (fictional)Hall of Fame x14

Let's get in.

sonikgamingnp@gmail.com

PGP: 4F2A 9C1D 77B0 E3A8 51D6 0B9E C4F3 2A18 7D5E 90AB (fictional)

github linkedin