📄 View my Resume · Online Preview
Offensive-security-minded engineer who builds and breaks systems for a living — then ships the fixes.
- 🕵️ Bug bounty hunter — reported high / critical vulnerabilities on HackerOne and Immunefi (Web3 / smart-contract security), verified on international platforms.
- 🦀 Rust deep-diver — using Rust since the 1.0 era; strong on ownership, borrowing,
unsafe, FFI, and system-level security. - 🤖 AI-native — private LLM deployment, AI coding assistants, RAG-based customer service, DevSecOps.
- 🏗️ 10+ years experience since 2016: chip test systems, security tooling, microservices architecture.
- 🌱 Building an AI Security venture — guardrails, red-team automation, secure-by-design AI products.
- 💬 Ask me about Rust · Web3 security · AI security · DevSecOps · Reverse engineering.
Fixed a panic / DoS vulnerability in RustSec / cargo-audit — the de-facto dependency-security auditor of the Rust ecosystem.
- Found & fixed an input-validation crash in
rustsec_refs_imported()(#1681): malformed OSV reference URLs caused a panic, crashingcargo-audit/cargo-denyfor downstream users. - Replaced a hard-coded byte-slice +
.expect()withstrip_prefix()+filter_map()— malformed URLs are now safely skipped instead of crashing. - Added unit tests covering valid, truncated, malformed, and mixed reference URLs.
- Single-file patch, +79 / −5, zero behavioural change for valid input.
Languages
Security
AI / Backend / Frontend
An AI Security venture — guardrails, red-team automation, and secure-by-design AI products.
I think like an attacker (white-hat) and build like an engineer — the combination AI security actually needs.
Security isn't a feature — it's a mindset.