Software Engineer · Cyber Security Advisor · CISSP
I build and secure production systems for regulated environments: secure cloud infrastructure, detection pipelines, and compliance programs aligned to NIST CSF, CIS Controls v8, and ISO 27001. Engineering depth applied to defensible security outcomes.
I bring an engineer's discipline to security: building the controls, instrumenting the telemetry, and shipping the tooling that proves a program is working.
I spent my early career building cloud infrastructure, backend services, and developer tooling: production systems on AWS with Terraform and Terragrunt, CI/CD pipelines, and automation across Python, TypeScript, PowerShell, and Bash.
That foundation is what makes the security work hold up. I do not just write the policy. I script the controls, instrument the telemetry, and maintain the tooling that demonstrates compliance. I work where security operations, governance and risk, and DevSecOps meet.
Correlation-driven log pipelines across identity, endpoint, and network telemetry, engineered to cut detection time from days to under an hour.
Risk tracking, remediation SLAs, and KPI dashboards built on recognized frameworks, turning compliance into something measurable and prioritized.
Production AWS infrastructure with policy-as-code, CI/CD quality gates, and secure SDLC practices baked into every module and pipeline.
Mercor Intelligence · San Francisco, CA
Dr. Shariq Mumtaz Medicine Professional Corp.
Department of Industry & Canadian Digital Service
National Research Council of Canada
A cross-platform Node.js CLI that generates QR codes as ASCII art with PNG export. Fully offline, MIT-licensed, distributed via npm and GitHub.
A privacy-first iOS habit tracker: three habit types, flexible scheduling, streak heatmaps, and CloudKit sync. Zero telemetry, no third-party SDKs.
Certifications
Education