Cybersecurity + AI/ML | 4 years in application security and penetration testing, now building at the intersection of security and machine learning.
MSBA @ UC Davis (2026). Previously: penetration testing at Culinda, vulnerability management at Security Lit.
I spent four years doing hands-on application security work before pivoting into data science and AI/ML. That background shapes how I build things now.
- Penetration Testing -- Web application testing, SQL injection discovery, API security assessments, compliance auditing (Culinda India)
- Vulnerability Management -- BlackDuck, Mend.io, SCA across 120+ enterprise applications, risk prioritization and remediation tracking (Security Lit)
- OWASP WSTG -- Practiced the full Web Security Testing Guide 4.2 methodology across client engagements
- TryHackMe -- Top 0.01% ranking
I work across security, AI/ML, and full-stack development. Most of my recent projects sit at one or more of those intersections.
- AI Agent Systems -- Orchestration frameworks, autonomous bots, LLM-powered tooling
- Data & ML Pipelines -- Predictive models, causal inference, data-driven decision systems
- Security Tooling -- Browser extension analysis, threat modeling, automated vulnerability detection
- Full-Stack Applications -- Real-time apps with Next.js, Supabase, and modern stacks
| Project | What It Does |
|---|---|
| nexus | Collaborative data analysis platform with AI-powered reporting for teams |
| Guardianpilot | Aviation safety AI detecting pilot spatial disorientation before it turns critical (3rd place, Navi AI Hackathon) |
| claude-agents-plugin | Agent orchestration for Claude Code -- parallel sub-agents with markdown file trees |
| gemini-collab | Real-time group chat with Google Gemini as a first-class participant |
| BartBot | WhatsApp bot for real-time Bay Area transit updates and smart routing |
| SF-traffic-problem | ML system predicting SF transit delays and parking availability |
Languages: Python, JavaScript/TypeScript, SQL
Security: Burp Suite, Nmap, BlackDuck, Mend.io, OWASP ZAP
AI/ML: scikit-learn, XGBoost, FAISS, LLM APIs (Claude, Gemini)
Backend: FastAPI, Flask, Node.js
Frontend: Next.js, React, Streamlit
Data: PostgreSQL, Supabase, Pandas, NumPy
Tools: Docker, Selenium, Playwright, Vercel