Staff Engineer at Samsung Electronics
Application Security · Security Engineering · AI Agents
I build security tools and platforms that help developers detect and validate vulnerabilities throughout the software development lifecycle. My work spans credential detection, security automation, and the development, deployment, and operation of AI agents for security testing.
- Application security: Automating vulnerability detection, reproduction, validation, and evaluation.
- Security tools and platforms: Building and integrating tools into development workflows and CI/CD pipelines.
- AI agents for security: Applying LLMs and agent workflows to security analysis and review.
A credential detection tool that identifies exposed secrets, such as passwords, API keys, and tokens, in source code and other files.
Developed the credential scanner that became CredSweeper and contributed to its open-source release. My work also includes enterprise integration and improvements to detection and review workflows.
A labeled credential dataset and benchmark for developing and evaluating credential detection tools.
Maintainer, with contributions to dataset design, curation, and benchmarking to improve credential detection quality.