██████╗ ██████╗ ██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔══██╗██║ ██║╚══███╔╝╚██╗ ██╔╝ ██║ ██║██████╔╝██║ ██║ ███╔╝ ╚████╔╝ ██║ ██║██╔══██╗██║ ██║ ███╔╝ ╚██╔╝ ██████╔╝██║ ██║╚██████╔╝███████╗ ██║ ╚═════╝ ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═╝
OFFENSIVE SECURITY · DETECTION & RESPONSE · VULNERABILITY RESEARCH
New York, NY (remote worldwide) · [email] · github.com/drewrad8 ·
root@druzy:~# ./recon --operator # 6 yrs, 4 roles
Security engineer — 6 years across Army cyber operations, defense-contractor red teams, and TikTok's global security org, working both sides of the wire: offense and the detection it feeds. I find vulnerabilities by hand, then turn the findings into automated pipelines: scanners covering millions of resources, custom tooling in Python and Go, SafeBreach simulations tuned to each environment — findings handed straight to detection engineering and SOC teams and driven to remediation. Background in embedded and IoT exploit development, mobile pentesting, protocol fuzzing, RF, and critical-infrastructure systems.
looking for: fully remote security work — offensive, defensive, or research — at an org that protects healthcare, fundamental science, or critical infrastructure.
root@druzy:~# cat arsenal.lst # --all --verbose
OFFENSE
Red & purple team ops·Vulnerability research·Exploit development·Network / web / mobile pentest·Wireless & RF (SDR, GNU Radio)·Fuzzing (AFL++, boofuzz)
BUILD
Python·Go·Bash·PowerShell·C++·MIPS / x86·Custom scanner & automation dev·SafeBreach BAS
INFRA & DETECTION
Linux hardening·Docker·Self-hosted cloud·Network ACLs·PCAP analysis·Splunk SIEM·Snort IDS·Nessus·Invicti·Burp Suite·OWASP ZAP·Ghidra·GDB·Wireshark
root@druzy:~# cat ops.log # reverse-chronological, unclassified extract
TikTok · Offensive Security Engineer — New York, NY
FEB 2024 – PRESENT
- Vulnerability research by hand: each finding becomes an automated check, and those scanners now sweep millions of resources across TikTok's global infrastructure — thousands of vulnerabilities remediated to date.
- Build custom offensive tooling in Python and Go; environment-specific SafeBreach attack simulations; lead cross-functional engagements with Detection Engineering and the SOC — finding → detection → fix.
- Present offensive tooling and findings to global teams — visibility is what gets vulnerabilities fixed.
Leidos · Penetration Test Engineer — Red Team, CIS VMP — Remote
JUL 2023 – FEB 2024
- Ran large-scale enterprise penetration tests; mined scan data to prioritize high-value targets, pentesting production with minimal user impact.
- Planned and executed large-scale purple team exercises; authored rules of engagement and full pentest reports; validated remediation with engineering teams.
Leidos · Cyber Research Engineer, Internal R&D — Reston, VA (incl. cleared contract)
APR 2021 – JUL 2023
- Exploit development for MIPS and embedded / IoT devices — zero-days via fuzzing, exploit chains on resource-constrained hardware; network-protocol fuzzers where binary emulation wasn't feasible.
- Mobile pentesting lead (Android / iOS), static + dynamic analysis; black-box / grey-box assessments on 500+-machine networks; maintained production C++ codebases, x86 → x86_64 migration for critical infrastructure.
U.S. Army · Cyber Operations Specialist (17C), Army Cyber Command — Fort Meade, MD
FEB 2020 – APR 2021
- Offensive and defensive cyber operations: deep PCAP analysis, malware reverse-engineering in Ghidra, wireless and RF attacks (Aircrack-ng, Metasploit, SDR / GNU Radio), web exploitation (Burp Suite, sqlmap).
- Operated Splunk + Snort IDS for real-time threat detection; built dashboards and data pipelines; led closed-network pentests.
root@druzy:~# ls -la ~/payloads/ # side operations
vr-vm↳ field report
AI-native vulnerability-research appliance: a kernel-instrumented, network-fenced VM where agent solve claims only count with auditd evidence. Two 24-challenge exploitation batteries; benchmarked GLM and Kimi agents head-to-head.
rf-sentinel
AI-assisted SDR monitoring stack: HackRF spectrum sweep, protocol decoders (ADS-B, ACARS, NOAA APT), Kismet integration, and a GLM-powered RF-intelligence layer over FastAPI + SSE.
strategos↳ github
Dashboard for orchestrating AI coding agents (Claude Code, Gemini CLI) across parallel tmux sessions.
druzy_sh↳ research
This site, hand-built — an interactive terminal web presence hosting evidence-graded research dossiers. Curl-friendly: the site answers shells and browsers differently.
root@druzy:~# cat /etc/credentials # verified
GPEN · OSWP · CompTIA Security+ · eJPT · JCAC (Joint Cyber Analysis Course, 2019)
U.S. Army veteran — 17C Cyber Operations.
U.S. Army veteran — 17C Cyber Operations.
Interactive. Commands:
help whoami arsenal ops payloads certs contact neofetch nmap whois resume --json curl cat link recruiter clear — tab completes, ↑ recalls, / focuses