Experience

Offensive Application Security Analyst

Citibank | July 2022 - Present

Discovered 10% of all High-Impact Priority vulnerabilities globally at Citi in 2023 and surpassed all other testers in the NAM region in both quantity and severity of the identified issues.
Performed white and grey box penetration tests with DAST tools including Burp Suite Pro, AppScan, ReadyAPI, SQLmap, and Kali Linux on web applications, APIs, databases, thick clients, and Android apps.
Conducted code reviews and vulnerability assessments on web applications, APIs, thick clients, and SaaS applications using tools such as Checkmarx, Qualys, Metasploit, and Nessus.
Performed infrastructure scanning to identify vulnerabilities and ensure robust security measures.
Created reports and collaborated with application teams to address reported issues and provide actionable remediation guidance.
Presented several vulnerabilities found during testing and held “tech talks” for NAM Application Vulnerability Assessment teams.
Developed several custom Burp Suite extensions using the new Montoya API to improve testing capabilities and efficiency, including integration with ChatGPT.

Citibank | July 2021 - July 2022

Led a successful migration from Solr to Elasticsearch for an internal search engine, leveraging Java and Angular technologies.
Managed a Red Hat Linux VM within Citi’s internal cloud, which hosted an ELK stack instance for the Elasticsearch migration.
Provided security consultancy, leveraging expertise to guide the team’s developers in implementing effective cybersecurity best practices.

The University of North Texas | Jan - May 2021

Developed a C++ program that:
- Stored social networks as a matrix in a compressed format.
- Used matrix multiplication to find the centrality of a given matrix to help identify super-spreaders of an infectious disease.

Citibank | July - August 2020

Gained a high level of understanding of the positions within Citi’s EO&T 2-year rotational program.
Acquired hands-on experience in:
- Analyzing data from production applications.
- The life cycle of a scrum project.
- The workflow of developing an application at a financial institution.