Offensive Security Specialist with 3+ years of experience in red team operations, penetration testing, and vulnerability management across financial technology and enterprise environments. Proven track record in identifying and exploiting complex vulnerabilities in web applications, APIs, and infrastructure—aligned with PCI-DSS, ISO/IEC 27001, and OWASP standards. Skilled in full-cycle security assessments, from reconnaissance to post-exploitation, using tools like Burp Suite Pro, Metasploit, and custom Python/Bash tooling. Adept at translating technical findings into actionable risk intelligence for developers and leadership, with a strong emphasis
on business logic abuse, secure SDLC integration, and proactive threat mitigation.