Now

Most of my time goes into building. The main project is an authorized security testing platform: isolated Kali containers, target allowlists, and controlled tool execution, so that offensive testing stays deliberate rather than improvised. It is the tooling I wished existed while I was learning security, which feels like reason enough to build it.

The quieter project is this site. I keep adding writeups on application security and security automation, partly to share what works, mostly because explaining something in writing is the fastest way I know to find out whether I actually understand it.

The current learning thread is systems and AWS: how the pieces underneath an application actually fit together, and how to build on them well. Right now that means preparing for the AWS Certified Developer Associate exam.

The practical part: I am open to software engineering roles, especially backend and platform work, and to teams that care about security. If that sounds like someone you need, hello@ksahoo.com is the fastest way to reach me.