Application Security Engineer
I build and write about deterministic security systems: framework-aware static analysis, browser-observed dynamic testing, AI-assisted review, and secure code generation that produce auditable evidence instead of alert noise.
Whitepapers
Durable research artifacts on application security, static analysis, dynamic testing, AI-assisted review, and secure code generation.
June 8, 2026
A model for turning repeated application security judgment into versioned enforcement artifacts that encode application-specific invariants and produce reviewable evidence.
June 8, 2026
A model for using AI to create more white-collar technical workers, not fewer, by pairing expert command with narrow problem lanes, artifact discipline, and readable, repeatable, reliable work.
June 8, 2026
An argument for making security intent concrete on ordinary ORM fields, then using generated metadata and static analysis to enforce local invariants.
Open Source
Pickle is an open-source secure backend generator for Go services. It turns declared models, relationships, ownership rules, and exposure intent into repository-owned code: request binding, typed query builders, service scaffolding, RBAC-aware handlers, GraphQL exposure controls, and generated metadata that security tooling can inspect.
The goal is to make the secure path the normal path. Pickle encodes backend decisions that are easy to miss in hand-written services: who owns a record, which fields may cross an API boundary, which routes require authorization, and which generated surfaces should stay consistent as the application changes.
Its Squeeze checks turn those expectations into repeatable review. Instead of relying on memory during every pull request, the repository can run checks for authorization drift, unsafe exposure, route posture, query shape, and generated-code consistency.
View on GitHubExperience
Financial systems, cryptocurrency exchange modernization, analytics platforms, incident response, DevSecOps, AI risk assessment, and security-tooling systems.
Co-founder building a self-improving security analysis harness combining deterministic SAST with AI-assisted review.
Senior Security Software Engineer modernizing exchange backends and enforcing release security safeguards.
Security-conscious engineering across ETL, analytics, fraud detection, e-commerce, legacy PHP, and infrastructure hardening.