About
I’m a London-based security engineer who has spent more than a decade finding the paths between a plausible foothold and the systems that matter. My work spans red team operations, adversary emulation, threat simulation and vulnerability research.
The problems I like working on
The most useful exercises rarely stay inside one technology. An identity weakness becomes an endpoint problem; an endpoint foothold opens a route into an application or cloud control plane. I like following that chain far enough to show what actually matters, then working backwards with defenders on the detections and controls that would have broken it.
That has meant adapting payloads around modern endpoint controls, automating infrastructure for repeatable exercises, modelling APT tradecraft with MITRE ATT&CK, and looking for initial-access routes beyond the usual phishing scenario. The goal is a better security decision, not a longer findings list.
Selected milestones
- Five published CVE records, including a SolarWinds Web Help Desk access-control bypass.
- Named in Bugcrowd’s Q3 2020 P1 Warriors for a critical submission.
- Acknowledged through the Google Bug Hunters programme.
- Named by Esri’s responsible-disclosure programme among its participating security researchers.
- Credentials including GCPN, OSEP, OSCP and OSWP, with issuer-hosted records.