shadowmap
Passive attack surface mapper using certificate transparency, DNS enumeration, and AI-powered risk analysis. No active scanning — full recon from public data only.
View on GitHub →
Hello, I'm
AI Security Engineer · Sr. SWE @ Mastercard · Builder of LLM defense tools
I'm a Senior Software Engineer at Mastercard specializing in Artificial Intelligence, Cybersecurity, and Auth & Identity architecture. I build intelligent systems that solve complex problems, from autonomous threat detection to automated penetration testing and prompt injection defense.
My open-source work centers on robust AI tools in Python that augment SOC analysts and security researchers. I bridge cutting-edge LLMs with practical security applications, including real-time jailbreak detection and AI-enhanced secrets scanning.
Keynote speaker at ICSDE 2026.
Invited keynote speaker at the International Conference on Smart Data Engineering (ICSDE 2026). Senior Software Engineer @ Mastercard, St. Louis, MO, USA.
View Speakers →Developing a framework for using large language models to parse, correlate, and prioritize CVE feeds and threat reports, delivering structured alerts to SOC teams in real time.
A Python-based pipeline that chains Nmap, Metasploit, and GPT-4 to autonomously enumerate, exploit, and report vulnerabilities in sandboxed environments — reducing manual effort by ~70%.
Designed a Kafka-backed microservice mesh capable of processing 2M+ events/sec with sub-10ms p99 latency, deployed on Kubernetes with auto-scaling policies.
Passive attack surface mapper using certificate transparency, DNS enumeration, and AI-powered risk analysis. No active scanning — full recon from public data only.
View on GitHub →Real-time prompt injection and jailbreak detector for LLM pipelines. Multi-layer defense: heuristics + AI meta-reasoning. Includes an HTTP API for easy integration.
View on GitHub →AI-powered SIEM alert triage assistant for SOC analysts — classifies alerts by severity, prioritizes response queue, and recommends remediation actions in plain language.
View on GitHub →A fast, minimal CLI file search tool written in Rust. Built to explore Rust's ownership model, iterators, and performance characteristics on real-world file I/O.
View on GitHub →AI-enhanced secrets scanner combining Shannon entropy analysis with LLM-powered false-positive elimination. Drop-in upgrade to gitleaks with smarter detection and fewer noise alerts.
View on GitHub →AI-powered REST API security scanner that analyzes OpenAPI 3.x specs for OWASP API Top 10 vulnerabilities — injection flaws, auth gaps, excessive data exposure, and more.
View on GitHub →Technical deep-dives published on LinkedIn — systems design, LLM infrastructure, and AI security explained from first principles.
Thoughts on AI, security engineering, and building in public.
I'm always open to discussing new ideas, research collaborations, or interesting projects. Reach out through any of the channels below.