Offensive security specialist with 8+ years of engineering experience, from embedded systems and electronic warfare R&D at Thales to full-stack and smart contract security. I run scoped, authorized penetration tests focused on real attack paths: exposed API keys in production JS bundles, IDORs, authentication bypasses, privilege escalation, and infrastructure misconfigurations (CORS, DMARC, exposed databases). I've uncovered critical vulnerabilities across funded SaaS startups and Web3 protocols including live API key leaks, stored XSS, SSRF vectors, and full account takeover chains. I deliver evidence-based reports with clear remediation. I work within strict rules of engagement, scope, and legal authorization.