Past and present work

Career

1. 2026 — now
   Founder & Security Researcher · Luda Hex
2. 2025 — now
   Offensive & Software Security Specialist · Xebia

   • Penetration tests, architecture reviews, threat modelling and targeted research across changing technology stacks.
   • Bring an offensive perspective into architecture and engineering discussions, where teams naturally understand the intended path better than the ways it can be misused.
   • Share findings through engineering talks, client workshops and hands-on training, adapting the depth to the people in the room.
   • Create new courses and workshops centred on secure engineering, cloud and AI.
3. 2024 — 2025
   IT Security Lead · ANVA

   • Led the introduction of secure engineering practices from design to deployment and runtime, where previously only a governance- and policy-based strategy was in place.
   • Brought secure code review into automated pipelines and local development workflows so engineers received feedback while they were still working on the code.
   • Connected signals across applications, networks, customer support and employee experience so isolated warnings could be recognised as part of the same incident.
4. 2023 — 2024
   Application & Offensive Security Consultant · Xebia

   • Worked with Lely to bring security into agricultural robotics engineering, where connected-device weaknesses could affect operational and physical safety. Attack surface covered embedded applications, local wireless networks connecting to remote systems, and development environments.
   • Built and delivered practical training in firmware reverse engineering, cloud and local network exploitation, and attacks against wireless devices.
5. 2020 — 2023
   Security Engineer · SEEK

   • Helped grow an early threat-intelligence capability into what is now a dedicated function.
   • Hosted capture-the-flag exercises in which developers practised exploiting the weaknesses they were learning to prevent.
   • Attack-surface expert on the offensive security team — social engineering, physical pentesting, and remote technical systems, from street to corporate network to server room.

Earlier experience spans 10+ years, including software development at SEEK, building a full-stack product as a founder at Yolko, and teaching at RMIT and the University of Melbourne.