Cybersecurity · Systems · Automation
I’m Aman, a cybersecurity student at Washington State University. I turn hands-on security research into practical tools for detection, triage, and resilient engineering.
01 / Selected work
Security tools and systems projects shaped around real workflows, not demo-only features.
Security platform · Featured project
A modular vulnerability scanning toolkit that brings reconnaissance, live-host validation, Nuclei scanning, custom checks, and structured reporting into one workflow.
Systems engineering
A Unix-like file system in C with persistent storage, inodes, block allocation, journaling, concurrency controls, and FUSE integration.
Developer tooling
A Python CLI that generates consistent GitHub Actions workflows from compact YAML configuration, with previews, pull requests, and run monitoring.
Vulnerability research
A focused Python scanner for authorized detection of a directory traversal vulnerability, designed for straightforward validation and remediation workflows.
02 / Experience
Jan 2026 — Present
PIAT · Crimson Service Desk · Washington State University
Triaging classroom IT and network incidents, supporting Okta identity and MFA workflows, and maintaining repeatable troubleshooting documentation for the service desk.
Mar 2021 — Present
Bug bounty & responsible disclosure programs
Investigating production systems, writing reproducible reports, and communicating impact and remediation. Disclosures include an SSRF reported to the United Nations and an information disclosure reported to Ferrari.
Aug 2023 — Present
Washington State University
Coursework across systems programming, network security, operating systems, cryptography, data structures, algorithms, and database systems.
Competition highlight
As part of WSU’s Coug team, I ranked 26th among 9,200+ students from 510 colleges in the National Cyber League—working across cryptography, log analysis, network traffic, forensics, and web exploitation.
03 / Toolkit
A practical toolkit spanning investigation, offensive validation, and the engineering needed to automate both.
Incident response & triage · Phishing analysis · Vulnerability remediation · SOP documentation
Wireshark · Nmap · Burp Suite · Metasploit · Nuclei · Splunk · Sentinel · Defender · CrowdStrike
Python · PowerShell · Bash · C/C++ · Go · SQL · Java · JavaScript · TypeScript
AWS · Azure · GCP · Docker · GitHub Actions · CI/CD · Arch Linux · Windows
NIST CSF · NIST 800-61 · OWASP Top 10 · CIA Triad · HIPAA/GDPR awareness
Certifications
04 / About
I’m drawn to the point where security meets systems engineering: understanding how something fails, documenting it clearly, and building a safer path forward.
Whether I’m tracing packets, debugging a classroom network, writing a scanner, or implementing a file system, I care about work that is explainable, testable, and useful to the person who inherits it.
Have a role, project, or security problem in mind?