THE PERSON BEHIND RED BRIXEN
An offensive perspective.
An engineer’s understanding.
01 / BACKGROUND
I work at the intersection of offensive security and software engineering. My focus is understanding how applications break—and how to build them better.
My engineering background spans backend services, APIs, enterprise integrations, and database-driven applications. Working on these systems has shaped the way I think about security: follow the data, understand the trust boundaries, and get close to the code.
That perspective carries into secure code review, authorization improvements, dependency management, and vulnerability remediation. Penetration testing adds another lens—a way to question what a system assumes and explore where those assumptions can fail.
I also value making technical ideas useful to other people. Instruction and mentorship are part of my background, alongside the practical work of building and securing software.
02 / AREAS OF FOCUS
Penetration testing, web and API testing, Active Directory security, attack-path analysis, enumeration, privilege escalation, lateral movement, credential attacks, vulnerability validation, post-exploitation
Secure code review, authentication and authorization testing, threat modeling, vulnerability remediation, dependency security, OWASP methodology, security architecture, secure design, API security, security control validation
Java 25, Spring Boot, Spring MVC, Hibernate, REST APIs, SOAP, JMS, object-oriented design, backend services, enterprise integrations, distributed systems, React, automated testing
Vulnerability research, CVE analysis, exploit reproduction, proof-of-concept development, attack-surface analysis, Burp Suite, Nmap, BloodHound, Impacket, Metasploit, Mimikatz, Rubeus, ffuf, NetExec, Ligolo-ng
Linux, Windows, AWS, Docker, networking, virtualization, Git, GitHub Actions, CI/CD, Oracle, MySQL, SQL Server, Liquibase, Gradle, Maven, security lab design
Java, Python, Bash, PowerShell, JavaScript, TypeScript, SQL, C#, automation, CLI development, technical instruction, curriculum development, mentorship, technical writing, security reporting, documentation
03 / THE STORY SO FAR
BUILDING SINCE 1996
I began developing software in 1996, building utilities and experimenting with automation, networking, and software distribution in the early AOL era. Online communities gave me a place to explore how things worked—and what I could make them do.
That curiosity grew into work on backend services, enterprise integrations, payment systems, and full-stack applications. Getting close to the code is still how I make sense of a system.
SECURITY & SOFTWARE
Red Brixen brings together my offensive-security research and application-security work. I explore attack paths, develop tooling, and turn what I learn into testing methodologies and practical engineering improvements.
Penetration testing and secure coding inform each other: understanding how software is built helps me test it, and understanding how it fails helps me build it better.
TEACHING & SHARING
I enjoy helping people find their way into difficult technical ideas. I create hands-on labs, demonstrations, and learning materials covering programming, ethical hacking, and security methodology.
My time examining tax returns and leading onboarding instruction at the IRS also shaped how I approach complex systems: be precise, document the reasoning, and help the next person understand it.
04 / CREDENTIALS & LEARNING
OffSec
Issued June 2026 · Expires May 2029
Verify credentialSimplilearn
Professional training certificate
Verify credentialCONTINUE THE CONVERSATION