I have some work experience and I am looking to turn that into a defined career path.
A collection of projects and tasks from my initial work experience, shared to show what I can do and how I learn on the job.
Captured 8 flags across intermediate web applications, identifying critical flaws including IDOR, SQL Injection, XSS, and parameter pollution Utilized Burp Suite and manual source code analysis to intercept traffic, map attack surfaces, and execute automated payloads via sqlmap Authored vulnerability remediation reports detailing technical proof-of-concepts and actionable defensive patches for discovered bugs
Implemented a raw TCP SYN network scanner in Python using Scapy, building a multi-stage probe cascade to accurately fingerprint plaintext/TLS services and extract SSL certificate Common Names
I have some work experience and I am looking to turn that into a defined career path.
I am Jordan Liao. I have some work experience but I do not yet feel like I have officially started my career. I am exploring opportunities to build on what I’ve done and find a clear direction.
Experience
Information Security Intern
Stony Brook University Hospital · June 2024 - May 2026
Code Reviewer
Remotasks/Outlier AI · March 2024 - December 2024
Education
Stony Brook University
Bachelor of Science in Computer Science · Class of 2026
Skills
Captured 8 flags across intermediate web applications, identifying critical flaws including IDOR, SQL Injection, XSS, and parameter pollution Utilized Burp Suite and manual source code analysis to intercept traffic, map attack surfaces, and execute automated payloads via sqlmap Authored vulnerability remediation reports detailing technical proof-of-concepts and actionable defensive patches for discovered bugs
Implemented a raw TCP SYN network scanner in Python using Scapy, building a multi-stage probe cascade to accurately fingerprint plaintext/TLS services and extract SSL certificate Common Names
Mitigated critical web vulnerabilities by securing application source code against SQL Injection and Cross-Site Scripting via robust input sanitization and output encoding Configured perimeter defenses using fail2ban, configuring automated rate-limiting and IP banning rules to protect endpoints against DoS and brute-force attacks