Cybersecurity Engineer & Security Researcher

Cybersecurity engineer focused on proactive threat hunting, Web AppSec, vulnerability assessment, and Capture The Flag (CTF) challenges. Dedicated to building secure, resilient digital infrastructure and identifying security flaws before exploitation.

View ProjectsContact MeResume
Ulwan

Contest Records

National Capture The Flag (CTF) Cybersecurity Championship

Ministry of Communication & Cyber Defense Agency

Nov 2024
1st Winner (Gold Champion)

24-hour non-stop national Jeopardy-style CTF competing against 150+ cybersecurity teams nationwide.

CTFWebSecCryptoReverse EngineeringGold

Algorithmic & Cyber Defense Hackathon

National University Cyber League

Aug 2024
Top 5 Finalist (Silver)

Intense security challenge building automated incident response scripts and analyzing malware PCAP traffic under strict time constraints.

PythonWiresharkPacket AnalysisDefSec

Regional Web Application Hardening Contest

Cyber Tech Association

May 2024
3rd Place (Bronze)

Red vs Blue team defense contest securing vulnerable microservices and patching zero-day exploits.

NginxLinuxAppSecPatch Management

Selected Project

SentinelEye — Threat Intelligence & SOC Dashboard

Enterprise security dashboard providing live packet analysis, automated threat feed ingestion, and interactive vulnerability attack surface maps.

Real-time WebSocket threat stream visualization
Automated IP geolocation & abuse reputation scoring
Dark mode cybersecurity HUD interface
Next.js 16TypeScriptTailwind CSSPythonWebSockets
Demo

VultrX — Automated Vulnerability & API Scanner

Automated security scanner engineered in Python & Go to detect CORS misconfigurations, exposed secrets, SQL injection vectors, and broken auth endpoints.

Custom Regex engines detecting exposed API keys & tokens
Automated PDF & Markdown vulnerability report generator
Concurrent asynchronous HTTP probing engine
PythonGoDockerOWASP Top 10REST API
Demo

CryptoVault — Zero-Knowledge PGP & Secret Storage

Zero-knowledge web application using Web Crypto API and AES-GCM 256-bit encryption for secure credential storage.

Client-side 256-bit AES-GCM encryption before storage
PGP key pair generation & verification tool
Zero server-side cleartext logging
React 19Web Crypto APITypeScriptTailwind CSS
Demo

Technical Capabilities

Software Engineering

Full-Stack Web Dev (React / Next.js)
TypeScript & JavaScript (ES6+)
RESTful API Architecture & Backend
Python Development & Automation
Database Design (SQL & PostgreSQL)

Cybersecurity & AppSec

Web Application Pentesting (OWASP Top 10)
Burp Suite Pro & API Auditing
Nmap & Network Reconnaissance
Vulnerability Assessment & Remediation
Cryptography & Auth Flow Analysis

DevSecOps & Infrastructure

Linux Administration (Kali / Ubuntu)
Docker Containerization & Hardening
Git & CI/CD Security (Semgrep / Trivy)
Wireshark & Packet PCAP Analysis
SIEM Log Parsing & Threat Intelligence
CAREER & EDUCATION TRACK

Work Experience

Cybersecurity & Security Operations Intern

Tech Innovation & Cyber Security Lab • Remote

Jan 2024 - Jul 2024

Conducted automated vulnerability scans, static/dynamic code analysis (SAST/DAST), and threat monitoring.

Identified and mitigated 14 critical OWASP Top 10 web vulnerabilities across production API endpoints.
Implemented automated CI/CD security scanning pipeline using Semgrep and Trivy to block vulnerable dependencies.
Engineered custom Python scripts for log parsing and SIEM event correlation handling 100k+ daily events.
PythonBurp SuiteLinuxDockerSIEMNmapGit
Internship

Application Security Analyst

Digital Defense Solutions • Hybrid

Aug 2024 - Present

Leading Web Application Security assessments, API pentesting, and security code reviews for enterprise clients.

Executed manual penetration testing on OAuth2 authorization flows, discovering logic flaw bypasses.
Developed security hardening guidelines adhering strictly to ISO 27001 and OWASP ASVS standards.
Mentored junior developers on secure coding practices, XSS prevention, and parameterized query enforcement.
Burp SuiteWiresharkTypeScriptNext.jsZustandOAuth2Linux
Part-time
ACADEMIC BACKGROUND

Bachelor of Science — Cybersecurity & Informatics Engineering

State Polytechnic / University

2021 - 2025
GPA / Honors: 3.85 / 4.00
President of Cyber Security & CTF Research Guild
Lead Researcher on Web Vulnerability & Cryptographic Protocols
Graduated with Honors / Cum Laude distinction