Business Logic Flaws: When the bug is the behavior

Offensive security engineer with experience in external penetration testing, web applications, APIs, and Active Directory infrastructure. My research led me to discover new attack techniques and several assigned CVEs. I also have experience from the defensive side (Blue and Purple team operations), incident response, and adversary TTP simulation across SIEM and EDR platforms to improve detection coverage. I hold the OSEP, OSCP, BSCP, OSWP and CCFA certifications.