$ whoami
secure-mcp engineer / professional services
I work in professional services, building secure MCP servers for clients — hardening the agentic layer against prompt injection, tool misuse, and privilege abuse. Alongside that I ship the internal apps that take friction out of my company's day-to-day.
// 01 · about
I'm a professional-services engineer focused on building secure MCP servers for clients — scoping tools tightly, defending against prompt injection and privilege abuse, and delivering agentic integrations they can actually run in production.
Alongside client work I build the internal apps that remove friction inside my own company — LLM-powered document generation, pricing, and analytics tooling designed so every output is fast, governed, and traceable back to its source. Security-trained, detection-minded, product-focused.
// 02 · how i work
Before any tool code: map what the model could be coerced into — prompt injection via tool results, tool misuse, privilege escalation, data exfiltration — and design controls against that, not against the happy path.
Scope the server to the minimum endpoints the use cases need, and reject everything else at runtime with a real allowlist — not a note in the prompt the model can be talked out of.
Verify the caller's token — signature and claims — on every tool invocation, and bind that identity to every action so nothing runs anonymously.
Tool output is structured, isolated from the system prompt, and DLP-scanned so PII and secrets never enter the conversation history.
Each tool call is a structured record — who, what, which endpoint, and a hash of the prompt that triggered it — so an incident can be reconstructed, not guessed at.
// 03 · experience
Design and deliver secure MCP servers for clients — scoping tools, hardening the agentic layer against prompt injection and privilege abuse, and shipping integrations they run in production. Alongside client delivery I build internal apps that remove business friction — including Helix, an AI sales-enablement platform (a GPT-4o SOW-generation pipeline, automated pricing calculator, engineering capability roadmap, and Service Navigator).
Advanced triage and investigation of security alerts across network, endpoint, and authentication telemetry using Splunk and CrowdStrike Falcon. Conducted threat hunting that identified a vulnerability and led to a customer-wide advisory report.
Forensic acquisition and analysis of digital media using industry-standard tools. Streamlined business-critical processes to cut processing time by 80%, and automated virus scanning and image documentation with Python (RPA).
// 04 · selected work
A working AI analyst plus an autonomous Margin Watch agent for D2C brands. Every number in an answer is server-side validated against a provenance model before it reaches the user; a gpt-4o-mini → gpt-4o router escalates on complexity, all over row-level-secure multi-tenant data. Built, tested, and documented end to end.
A work-in-progress agentic-security training lab — a deliberately vulnerable MCP server (“the Metasploitable of MCP”) that maps the OWASP Top 10 for Agentic Applications to hands-on scenarios with an insecure/hardened toggle. Early and actively in development.
Internal AI sales-enablement platform. A GPT-4o SOW generation pipeline, automated pricing calculator, engineering capability roadmap, and Service Navigator — Express.js, PostgreSQL, Redis, Prisma on Azure.
A filesystem-level PII detection tool that scans images, text, Word docs, and PDFs for sensitive-data exposure, enhanced with NLP-based entity recognition for structured and unstructured PII patterns.
A comparative analysis of randomness-testing algorithms and suites — methodology and results written up as a research draft.
A tiny toy that generates an excuse for every day of the week. Kept around because it still makes me laugh.
// 05 · skills
// 06 · contact