
Breaking in, ethically, so attackers can't
Penetration tester with eight years finding and exploiting security weaknesses, ethically and under authorisation, for a security consultancy in Seoul. Thinks like an attacker to defend organisations — testing web applications, networks and infrastructure, finding the vulnerabilities a real attacker would, proving the impact safely, and writing clear reports that help clients fix what matters most. Found critical vulnerabilities in major client systems before attackers could and helped strengthen their defences. Conducts authorised penetration tests, exploits and proves vulnerabilities safely, assesses risk, writes clear remediation reports, and advises clients on fixes. Sharp, ethical and thorough. Looking for a senior penetration-tester or offensive-security role with a firm doing serious, authorised security testing.
Penetration Tester January 2019 to Present 7 years & 10 months
Found critical vulnerabilities in major client systems before attackers could and helped strengthen defences.
Test web applications, networks and infrastructure, finding the vulnerabilities a real attacker would exploit.
Exploit and prove vulnerabilities safely, showing clients the real impact without causing actual harm.
Assess and prioritise risk, so clients fix what genuinely matters most rather than chasing every minor issue.
Write clear remediation reports and advise clients, turning findings into fixes that actually close the gaps.
Security Analyst March 2016 to December 2018 2 years & 10 months
Tested systems and reported findings, steadily building exploitation and assessment skills over the years.
Learned vulnerability assessment, testing and reporting on the job across more than two years.
Gained the OSCP and experience that led into a full penetration-tester role of my own.
BSc in Cybersecurity (March 2012 to February 2016)
OSCP Certification (January 2017 to June 2017)
Offensive Security (June 2017 to Present)
- Penetration Testing
- Web App Security
- Network Exploitation
- Vulnerability Assessment
- Exploit Development
- Risk Assessment
- Reporting & Remediation
- Security Tools (Burp/Metasploit)
- Scripting (Python)
- Ethics & Scoping