I work in security assurance at Deriv, mostly around AppSec, secure code review, DevSecOps, cloud hardening, and the parts of AI automation that make security work less repetitive.
I like building practical things: archives, dashboards, recon helpers, CVE monitors, and small bits of automation that help engineers spot problems earlier. I also write about the messier parts of security work, where the useful lessons usually hide.
- Leading security assurance work across application, API, mobile, cloud, and CI/CD surfaces
- Using AI to speed up AppSec triage, threat intelligence, secure review, and security workflow automation
- Building security tools that are boring in the best way: reliable, searchable, and useful under pressure
- Writing public research, field notes, and learning material for people who like taking systems apart
- SecurityJunky - AppSec, DevSecOps, cloud security, AI automation, and vulnerability research notes.
- AI Vault - A home for projects, experiments, research, and shipped security-adjacent work.
- Chromium VRP Archive - A searchable archive of disclosed Chromium VRP reports and bounty metadata.
- QuiloBook Malware Analysis - A Deriv security writeup co-authored with Deriv's Head of Security on a supply-chain attack delivered through trusted vendor communications.
- BeaverTail Malware Analysis - A deep dive into a fake recruiter campaign, malicious GitHub repo, and multi-stage payload chain.
- OSWE Certification Journey - Notes from preparing for and passing OSWE on the first attempt.
- PolyLens - A sharper workspace for Polymarket discovery and portfolio context.
- CVENotifier - Custom CVE feed notifications for tracked technologies and products.
- JSScanner - Bash tooling for JavaScript endpoint and secret discovery during recon.
- ffufplus - Automation around ffuf for content discovery workflows.
- ZDI Advisories - Searchable Zero Day Initiative advisory dashboard.
- Unofficial OSWE Exam Notes - Notes and observations from OSWE preparation.
- OSWE, OffSec Web Expert
- OSCP, OffSec Certified Professional
- Resume: resume.aivault.securityjunky.com
- LinkedIn: linkedin.com/in/dark-warlord14
- Blog: securityjunky.com
- Medium: medium.com/@dark_warlord14
