$ whoami
secure-mcp engineer / professional services
I work in professional services, building secure MCP servers for clients — hardening the agentic layer against prompt injection, tool misuse, and privilege abuse. Alongside that I ship the internal apps that take friction out of my company's day-to-day.
// 01 · about
I'm a professional-services engineer focused on building secure MCP servers for clients — scoping tools tightly, defending against prompt injection and privilege abuse, and delivering agentic integrations they can actually run in production.
Alongside client work I build the internal apps that remove friction inside my own company — LLM-powered document generation, pricing, and analytics tooling designed so every output is fast, governed, and traceable back to its source. Security-trained, detection-minded, product-focused.
// 02 · experience
Design and deliver secure MCP servers for clients — scoping tools, hardening the agentic layer against prompt injection and privilege abuse, and shipping integrations they run in production. Alongside client delivery I build internal apps that remove business friction — including Helix, an AI sales-enablement platform (a GPT-4o SOW-generation pipeline, automated pricing calculator, engineering capability roadmap, and Service Navigator).
Advanced triage and investigation of security alerts across network, endpoint, and authentication telemetry using Splunk and CrowdStrike Falcon. Conducted threat hunting that identified a vulnerability and led to a customer-wide advisory report.
Forensic acquisition and analysis of digital media using industry-standard tools. Streamlined business-critical processes to cut processing time by 80%, and automated virus scanning and image documentation with Python (RPA).
// 03 · selected work
A working AI analyst plus an autonomous Margin Watch agent for D2C brands. Every number in an answer is server-side validated against a provenance model before it reaches the user; a gpt-4o-mini → gpt-4o router escalates on complexity, all over row-level-secure multi-tenant data. Built, tested, and documented end to end.
A work-in-progress agentic-security training lab — a deliberately vulnerable MCP server (“the Metasploitable of MCP”) that maps the OWASP Top 10 for Agentic Applications to hands-on scenarios with an insecure/hardened toggle. Early and actively in development.
Internal AI sales-enablement platform. A GPT-4o SOW generation pipeline, automated pricing calculator, engineering capability roadmap, and Service Navigator — Express.js, PostgreSQL, Redis, Prisma on Azure.
A filesystem-level PII detection tool that scans images, text, Word docs, and PDFs for sensitive-data exposure, enhanced with NLP-based entity recognition for structured and unstructured PII patterns.
A comparative analysis of randomness-testing algorithms and suites — methodology and results written up as a research draft.
A tiny toy that generates an excuse for every day of the week. Kept around because it still makes me laugh.
// 04 · skills
// 05 · contact