// about
Hi, I'm Yianna
I like to break systems and help others build them securely.
I'm a consultant in Offensive and Application Security. You can find me speaking at conferences, training at events such as DEFCON or creating security workshops for private companies.
They told me buffer overflows were dead, and then I discovered IoT and embedded software still have these issues. They also said the same about SQL injection, then we hooked up Agentic AI and LLMs to databases and reimagined the problem. Telling me it's impossible or too difficult just makes me try harder. I am comfortable reading, analysing and quickly getting up to speed in almost any tech stack.
My broad experience in various security domains gives me the organisational context and empathy needed to help bridge knowledge gaps and find the important problems.
- Experience areas
-
- Offensive Security
- Application Security
- Open source intelligence
- Reconnaissance and initial access
- CI/CD Tooling and Controls
- Secure Development Practices
- LLM and Agentic AI Security
- SOC & Incident Response
- Threat Hunting
- Secure Cloud Architecture
- Security Training
- Tech Stack domains
- Education
-
- B.Sc Computer Science · RMIT University · 2021
- Prize for Women in Computer Science · 2019
- School of Science Excellence Award · 2018
- B.Des Digital Media Design
- Professional development
-
- AWS ML Engineer (in progress)
- OffSec OSWE & OSWP content · 2024
- SpecterOps Adversary Tactics: Detections · 2023
- MITRE ATT&CK Defender · Adversary Emulation 2023, CTI 2022
- InfoSect Canberra · C Code Review 2022, Reverse Engineering 2021
- Black Hat · Beyond the Web App Hacker’s Handbook · 2021
- OffSec OSCP content · 2020
- Curious about
-
- Agriculture
- Robotics
- Space technologies
- Autonomous vehicles
- Biometrics and access control
- Surveillance technologies