Work
Systems I've designed and shipped: what the problem was, what I built and what changed afterwards.
- BarbicanAn AI security orchestration platform that cut manual L1/L2 alert triage by about 60%.
- In-house WAFA Pingora, Coraza and Nginx Ingress WAF that improved bot fingerprinting accuracy by 48%.
- JA4 bot detectionReal-time TLS fingerprinting that cut automated payment-API abuse by 45% with zero user friction.
- Next-gen SOC on the Elastic Stack500+ MITRE-mapped detections; 40% faster detection and 52% fewer false positives.
- Multi-cloud compliance automationTerraform and OPA baselines with drift detection across 12,000+ systems: 60% better compliance.
- Enterprise OVAL and YARA library6,000+ OVAL rules and custom YARA signatures for Cisco, Juniper and McAfee product lines.