About
Cybersecurity professional specializing in penetration testing and security research, focused on identifying high-impact vulnerabilities. Experienced in web application security and translating technical findings into actionable remediation. Internationally recognized for responsible disclosure and trusted to assess complex systems.
Selected Recognitions
Identified and responsibly reported security vulnerabilities across 100+ organizations, including NASA, the U.S. Department of Defense, the United Nations, Norsk Helsenett, Ferrari, Mercedes-Benz, Oracle, Red Bull, Nintendo, and others.
View selected recognitions →
- NASA — Letter
- Drexel University — Letter
- Norsk Helsenett — Hall of Fame
- U.S. Department of Health and Human Services — Hall of Fame
- Ferrari — Hall of Fame
- Philips — Hall of Fame
- Oracle — Security Contributor
- Proofpoint — Hall of Fame
- Nokia — Hall of Fame
- Fastweb — Hall of Fame
- United Nations — Hall of Fame
- EU CERT — Hall of Fame
- ExploitDB — Google Hacking Database Contributor
- BSides Oslo 2025 — 1st Place, Advanced Lockpicking
Experience
Penetration Tester — Oslo Municipality CSIRT
Jan 2024 - Dec 2024
• Performed web application and API penetration testing.
• Validated and retested vulnerabilities using OWASP and CVSS.
• Responsible for retesting and verification of all prior findings.
• Planned and executed phishing simulations with GoPhish and M365.
• Investigated security events in Microsoft Sentinel using KQL.
• Collaborated with the CSIRT on triage, investigation, and response.
• Tracked threat intelligence and vulnerabilities with the CSIRT.
• Contributed to reporting workflows and assessment documentation.
• Presented findings, risk, and remediation guidance to clients.
Photographer — Independent
• Primarily worked on architecture and event photography projects.
• Planned, produced, edited, and delivered client projects.
• Advised clients on visual direction and presentation.
• Portfolio →
Professional Development
Certifications
eCPPT (Certified Professional Penetration Tester)
eWPT (Web Application Penetration Tester)
OSCP (Scheduled)
Training
Foundations of Operationalizing MITRE ATT&CK
Virtual Hacking Labs (Basic & Advanced+)
NSM Grunnprinsipper for IKT-sikkerhet
OSINT Combine (OSINT Foundational)
HackTheBox ProLabs (Dante, Zephyr)
The Bug Hunter's Methodology
PEN-200 (PWK)
Red Team Ops
Education
University of Oslo (UiO)
Autumn 2026 | Oslo, Norway
Skills
Penetration Testing (Infrastructure, Application, Wireless)
Security Research
Red Teaming (Active Directory, Evasion, C2)
Phishing & Social Engineering
Detection & Monitoring (SIEM, Defender for Endpoint)
Digital Forensics
Automation & Scripting (Bash, Python, PowerShell)
OSINT & Reconnaissance
Physical Security (Access Control, Lockpicking, RFID)
AI & LLMs
Reporting & Documentation
Licenses
Motorbike License (Class A)
Skydiving License (A License)
Sports Shooting License
Belay License (Brattkort)
Glacier Course (NF Grunnkurs Bre)
Avalanche Safety Course