Security, with
a real-world
perspective.
I’m Kevin. I connect security findings to what matters—and build practical tools to close the gap.
See what I’m buildingBuilt to be useful.
Hands-on projects that turn security
challenges into something actionable.
Project screenshots show synthetic demonstration or sample data.
A finding is a
starting point.
Context is what
comes next.
I’m a Security Analyst with five years of experience in vulnerability management and web application security.
My focus is on understanding how an issue can actually be used, helping people take action, and making the process easier to repeat. That means working through findings, validating behavior, and building tools that make useful information easier to find.
I’m especially interested in the space between a scanner’s output and a security decision—the context, conversations, and hands-on testing that make the difference.
Understand the exposure
Validate the behavior
Make the next step clear
Driving remediation forward.
Platform migration. Developer collaboration.
Partnerships that help turn findings into action.
Security Analyst
Vulnerability management
& web application security
and development.
Web application security migration
Helped transition web application scanning from Qualys WAS to NightVision Security.
Working with development teams
Working with development teams to remediate findings from GitLab Security and SonarQube.
Remediation across seven teams
Partner with seven system, application, and development teams to drive vulnerability remediation.
Beyond the dashboard.
SOFTWARE SUPPLY CHAIN SECURITY
Your Web Application Is Made of Worms:
What the Shai-Hulud Supply Chain Worm Teaches Us About Modern Application Security.
A case study in how third-party packages can carry risk through developer environments, build systems, and cloud services—and what that means for application security.
The Gap Between Vulnerability Management and Reality
Why Your Web Apps Are Still Exploitable.
A practical look at why findings alone don’t tell the whole story—and how context, validation, and an attacker’s perspective can change the way we prioritize.
Let’s talk
security.
For project questions, application security conversations, or speaking opportunities, email me or connect on LinkedIn.