Hi! I'm Mark
I am an experienced penetration tester with a focus on application security in the following areas:
- Web applications
- Mobile applications
- Desktop applications
- APIs, SDKs, and Web Services
- Cloud applications
- Microservices and containerized applications
- Serverless applications
Over the years, I have developed extensive experience in orchestrating comprehensive security assessments for a diverse range of applications and cultivated expertise in:
- Strategic Leadership: Defining methodologies, innovating toolsets, and setting best practices that steer effective and efficient penetration testing.
- Consulting: Serving as a principal application security consultant specializing in web, mobile (Android & iOS), automotive, desktop, and API testing.
- Mentorship: Empowering the next generation of security experts through training, guidance, and thought leadership.
- Collaboration: Bridging gaps between security teams, fostering a collaborative environment to collectively drive application resilience.
- Remediation: Identifying and developing remediation strategies for security findings and bug bounty reports, collaborating with development teams to ensure effective implementation.
- Comprehensive Security Assessments: Executing a wide range of penetration tests including external, internal, and application testing for global clients in various sectors, leading projects from scoping to detailed reporting and remediation.
I am passionate about strengthening the security posture of applications, constantly evolving my techniques to stay ahead of emerging threats, and ensuring the highest standards of application security.
Here are some stats about the languages I use in my repositories:
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent