Michele C.

Ex-Amazon and ex-Accenture offensive security engineer. I go beyond automated scans to identify and exploit real-world vulnerabilities in production systems. I hold top-tier industry certifications including OSCE³, OSEP, OSED, OSWE, OSCP, CRTO, CRTE, and GPEN - among the most advanced credentials in the offensive security space. I focus on identifying real-world vulnerabilities in web applications, APIs, and cloud environments, going beyond automated tools to uncover issues that have actual impact. My work is centered around: • Authentication and session management flaws • Authorization issues (horizontal/vertical privilege escalation) • Business logic vulnerabilities • Injection vectors and input handling weaknesses I approach every assessment as an attacker would - manually testing the application to identify realistic attack paths and chaining vulnerabilities where possible. Each engagement includes clear and actionable deliverables: • Detailed findings with proof of concept • Realistic impact assessment • Practical remediation guidance • A professional report suitable for both technical teams and stakeholders I’ve worked with both startups and large-scale systems, and I’m comfortable operating in production environments when required. I also stay involved after the assessment, working with the team to re-test previously identified vulnerabilities and ensure they are properly resolved. Let’s discuss how I can help secure your business.