Engineering work, open to inspection.

Prompt engineering, agents & full-stack AI delivery

Prompt engineering is a core part of my practice: I define the task, supply technical context, set constraints, connect tools, and specify the evidence a result needs. I use AI for reverse engineering, code creation, and full-stack development—from interfaces and APIs to persistence, infrastructure, debugging, and tests.

I use execution records, evaluation, and review to identify failures and refine prompts, configuration, and workflows. This includes prototypes for approval controls, usage visibility, and reviewed training-data candidates; improvement comes from examining results and testing the next change.

Reverse engineering & exploit analysis

I work backward from software behavior to understand execution paths, prerequisites, and failure conditions. My research includes source analysis, executable and memory analysis, packet captures, custom protocols, and serialized payloads.

Exploit analysis and controlled reproduction help separate a vulnerable component from a reachable, exploitable condition. Challenge and lab work also give me a place to investigate unfamiliar systems and document findings, unsuccessful attempts, and remaining questions.

Nessus detection, exposure & identity

I’ve authored and published numerous Nessus direct checks over the years, researching vulnerabilities and developing detection logic across web applications, routers, databases, queueing applications, and network services. I investigate ports, configuration, and protocols such as GIOP, RMI, and LDAP to understand what an exposure allows an attacker to do.

I was a core author and contributor to Tenable’s AI-aware shadow-detection campaign. My contribution included bulk scripting and plugin-development workflows that helped establish initial detection capabilities, metrics, and insight for Tenable customer organizations worldwide. My role was part of Tenable’s collaborative research and engineering effort.

I connect that analysis to defender-facing detections and practical checks, with attention to false positives and reproducible evidence. I’m CISSP certified, with strong identity and access management expertise spanning Active Directory, authentication, authorization, and access controls.

Technical forensics & reconstruction

I build tooling to reconstruct what happened across AI sessions, tool actions, and generated artifacts. Local implementations connect source references, timestamps, session records, artifact snapshots, and hashes so an investigation can follow the evidence back to its origin.

Hash-linked journals and integrity checks help inspect retained records; recovery checks and explicit coverage gaps help explain what those records can support. I use that history to reproduce failures, compare versions, and explain a result.

Quality assurance & test engineering

Quality engineering is part of how I build. I connect requirements to expected behavior, implementation, and test evidence through structured specifications, behavioral scenarios, and traceability checks.

My projects use unit, integration, regression, interface, and smoke tests, alongside failure and recovery scenarios. I test locally, inspect the running result, and use what breaks to improve both the implementation and the checks around it.

Courseware & knowledge systems

I build learning platforms and content pipelines that connect structured course material, lessons, quizzes, and learner workflows. Local projects include LMS integration, automated intake, generated learning artifacts, validation, and review points.

That work draws on hands-on teaching and lab development: explain the system, give someone a way to practice, and check understanding. Technical documentation and operator training make the implementation easier for others to use and maintain.