Building secure systems and breaking insecure ones
I'm a security engineer specializing in application security, DevSecOps, and AI security. With a strong foundation in Go and cloud infrastructure, I build tools that help developers ship secure code faster.
Currently focused on emerging AI security challenges including prompt injection, model extraction, and adversarial attacks on LLMs.
When I'm not breaking things, I'm writing about security best practices and contributing to open-source security tools.
Multi-stage pipeline with SAST, dependency scanning, container scanning, and automated deployment with rollback capabilities.
Automated tool for detecting prompt injection vulnerabilities and testing LLM applications for common security issues.
Collection of security utilities for Go applications including input validation, secure random generation, and crypto helpers.
February 2026
A deep dive into how prompt injection works, real-world examples, and mitigation strategies for LLM applications.
Read More →January 2026
Step-by-step guide to implementing security scanning, testing, and deployment with automated rollbacks.
Read More →December 2025
Learn how to secure your Docker containers with multi-stage builds, vulnerability scanning, and runtime protection.
Read More →I'm always interested in hearing about new security challenges and collaboration opportunities. Feel free to reach out!