Cybersecurity professional with 6+ years of hands-on experience in penetration testing, security engineering, technical leadership, training and research. Experienced across external/internal pentesting, web applications, APIs, networks, infrastructure, Active Directory, social engineering, wireless security, AI/LLM security, reporting, remediation and retesting.
Security engineering, penetration testing, technical leadership and teaching roles, each shown separately.
External/internal testing across information systems, web applications, APIs, networks and infrastructure; risk validation, reporting, remediation guidance and retesting.
Web, network and infrastructure security assessments; attack-path validation; vulnerability prioritization; executive/technical reporting and remediation support.
Practical pentesting training, labs, assessments, presentations and course materials.
Camp leadership, program delivery and cybersecurity education.
Cybersecurity and ethical hacking lectures, practical sessions and student assessments.
Penetration-testing training, practical exercises, presentations, tests and quizzes.
Cybersecurity lectures, course materials, practical activities and hackathon-based learning.
Application/infrastructure penetration testing, vulnerability validation, technical reporting and remediation guidance.
Academic background kept separate from work experience.
Master of Science in Cybersecurity (MSCS), online program in the United States.
Bachelor of Science in Computer Science. Research later developed into a 2026 public bio-cybersecurity thesis defense.
Diploma of Higher Education, Tbilisi.
Created and led a ~10-person team. Personally helped build and program the rover and developed its phone application. The rover included movement, sensors, a robotic arm, camera, remote control and autonomous functions. The completed rover won the competition.
Multi-workstream security assessments involving web applications, APIs, external/internal infrastructure, Active Directory, attack-path validation, reporting, remediation and retesting.
Authentication, authorization, sessions, file handling, business logic and server-side vulnerabilities.
REST/OpenAPI, BOLA/IDOR, authentication, object access and role boundaries.
Attack surface mapping, network assessment, service exposure and controlled exploitation.
Privilege paths, internal attack paths, identity security and lateral-movement opportunities.
Prompt injection, data leakage, unsafe integrations and trust-boundary testing.
Authorized human-layer testing and realistic security-awareness scenarios.
Wireless assessment and practical attack-surface validation.
Executive summaries, technical findings, remediation guidance and verification of fixes.
Applications, APIs, infrastructure and internal systems.
Information systems and infrastructure-focused security.
Sensitive operational environments and security assessment.
Product, application, API and infrastructure security.
Universities, training centers, cybersecurity programs and camps.
Networked environments and security-focused technical work.
Internal networks, identity systems and attack paths.
Professional and academic security education.
Bio-cybersecurity research developed from a public three-minute concept into a larger experimental thesis.
Presented as a separate three-minute research concept before the later thesis. It focused on the security implications of emerging neural and biometric interfaces and placed 2nd at Falling Walls Lab Georgia 2025.
Experimental, simulation-based research focused on EEG biometric authentication security. Supervisors: Davit Kipshidze and Maksim Iavich. The work used the PhysioNet EEG Motor Movement/Imagery dataset recorded with BCI2000, with 109 source subjects and experiments on 30 selected subjects across 64 EEG channels.
The thesis was designed as an ethically acceptable simulation and analysis project. It did not involve harmful human testing or invasive hardware modification.
Practical cybersecurity education built around labs, demonstrations, realistic scenarios, assessments and hands-on exercises.
Cybersecurity fundamentals, ethical hacking, pentesting, web security, networking, social engineering, vulnerability assessment, reporting, Active Directory and awareness.
Six-month practical program covering foundations, web pentesting, network pentesting, Active Directory, social engineering, reporting and capstone work.
Labs, demonstrations, scenarios, assessments, hackathons, course design, curriculum development and mentoring.
EC-Council certification.
Authorization in Georgia to perform penetration testing.
Additional security training and practical labs.
Social Engineering / Phishing research presentation.
Breaking the Wall of Bio-Cybersecurity.
Co-Founder of Cyber Security & Protection Agency, a Georgian cybersecurity company focused on offensive security, awareness and training.
Web, network, Active Directory and technical assessments.
Risk identification, validation, remediation guidance and retesting.
Corporate awareness, ethical-hacking courses, workshops, seminars and cyber camps.
Cybersecurity education, scam investigations, social engineering, practical demonstrations and security-awareness content.
Explaining dark-web concepts through an educational format.
Educational walkthrough of TOR and darknet concepts.
Practical awareness-focused demonstrations around privacy and wireless risks.
Future articles on offensive security, practical pentesting, research, teaching and career development.
Methodology, web/API security, attack paths and reporting.
Bio-cybersecurity, EEG authentication and AI security.
Cybersecurity careers, teaching, labs, competitions and projects.
Offensive security engineer, lecturer, researcher and founder working across practical security, education and technical experimentation.