Work Experience
My professional journey and the roles that have shaped my career.
Sunnyvale, CA
Security Engineer, Offensive Security
July 2023 - Present
- Designing and executing realistic red team exercises using novel Tactics, Techniques, & Procedures (TTPs) against several client-centric and enterprise products to improve Google's security posture.
- Architecting and developing tools to support penetration tests through the reconnaissance and post-exploitation phases resulting in increased operator convenience and stealthier attacks.
- Collaborating across teams on security reviews, vulnerability taxonomies, and helping organize security events such as the BSidesSF CTF, Red Team Summit, and HackTheCity at SaferWithGoogle.
Security Engineering Intern, Offensive Security
June 2022 - September 2022
- Conducted extensive Open Source Intelligence (OSINT) investigations to identify foothold vectors on Google's production & corporate environments.
- Introduced query-capable knowledge graphs, and through subsequent automation, saved operators 2+ weeks of reconnaissance time.
- Collaborated on a specialized penetration test, safely simulating insider risks, that targeted critical production infrastructure, resulting in a broader push for healthier credential habits.
Security Engineering Intern, Threat Detection
June 2021 - September 2021
- Designed & built a platform and OS agnostic Zeek script validation tool using Go and the Google Cloud Platform to provide a strandardized testing environment for threat detection automation.
- Implemented the tool as an on-demand utility with a custom Docker image, reducing the testing time to 60 seconds.
- Assisted the Corp Task Force in threat detection and analysis to mitigate insider threats and permission creep.
Susquehanna International Group
Bala Cynwyd, PA
Cybersecurity Coop, Firewall Services
September 2020 - March 2021
- Designed & built a Rule Lookup tool using Python3 and custom APIs, automating manual firewall rule lookup operations across all firewalls.
- Configured & managed firewall rules to facilitate secure network access for various services & workstations across global offices and exchanges.
- Collaborated on automation projects for firewall health checks, status alerts, and data-aggregating operations to guarantee up-time during trading hours.
STAR Scholars, Drexel University
Philadelphia, PA
Student Researcher
July 2020 - September 2020
- Conducted research on leveraging ontologies & semantic graphs, with SPARQL queries, to create contextual representations of security information for Industrial Control Systems (ICS).
- Developed an ontology using Protege to model threats, vulnerabilities, exploits, and critical security information.
Kyrion Technologies
Kolkata, India
Cybersecurity Intern
June 2019 - June 2019
- Worked on projects involving Password Cracking, Dictionary Attacks, Cross Site Scripting, etc.
- Conducted cost analysis and presented vulnerability reports on widely used hashing algorithms.
- Earned the Microsoft Training Association's Security Fundamentals certification.