I'd like to build one from the inside. I run security reviews, threat modeling, and vulnerability management, and I ship the fix in the codebase rather than filing the ticket. I also lead Canada's largest hacker community.
I run security reviews, architecture review, and threat modeling of design documents before code ships. I triage inbound disclosure reports, reproduce them, work out real impact, and track remediation to a fix that holds.
I've reported 120+ validated vulnerabilities through HackerOne, including severe issues on PayPal, plus Airbnb, Sony, Booking.com, and AT&T. Having been the researcher submitting to programs, I know which ones treat people well and which ones burn them.
Before consulting, I was the entire security function at a retail chain scaling toward national coverage. There was no security program, so I built one, and eventually put security checks inside the CI/CD pipelines. That was before DevSecOps was a common job title, and it's where I learned to automate first.
A trust boundary drawn wrong on a whiteboard costs an afternoon. The same mistake in production costs a quarter. I model abuse cases with the engineers who wrote the doc.
A scanner at default settings buries a team in noise until they stop reading it, which is worse than nothing. I'd rather ship five findings a week that are all real than five hundred that aren't.
Findings get traced to root cause, then checked for the same pattern everywhere else. One IDOR is a bug. The same authorization mistake in nine places is a design problem.
Open source (MIT) AI-driven security workspace orchestrator that runs offensive workflows with an agent in the loop. Building it is how I learned where these systems break: tool-permission boundaries, agents doing confidently wrong things, and the gap between what a model says it did and what it did. github.com/amir-hosseinpour/eidolon →
Hardware and firmware security research under the vendor's bug bounty program. UART console access, firmware extraction, then up through the cloud API and mobile app.
Burp Suite extension for automated OAuth2.0 and OIDC authorization-bypass detection, and a Nuclei template library for API and application vulnerability discovery.