Fullstack Software Engineer & Offensive Security Practitioner — building secure applications, extracting data intelligence, and hacking systems across web, network, cloud, and Active Directory domains.
Projects Built
Attack Domains
Core Pillars
Batya Boyo
Fullstack Engineer • Data Analyst • Ethical Hacker
I engineer reliable full-stack applications, conduct structured penetration tests across multiple attack surfaces, and extract clear intelligence from complex datasets.
My security work is driven by curiosity — I think like an attacker to help defenders. That means testing networks, not just websites; cracking Active Directory trust chains, not just login forms; and auditing cloud configurations alongside web APIs. Each engagement is scoped, authorized, and documented to professional standards.
Fullstack Software Engineering: Architecting resilient web applications with PHP/Laravel, Python/Django, TypeScript, Next.js, and RESTful APIs — with security built in from the ground up.
Data Analysis: Querying, processing, and visualizing complex datasets using SQL, Python (Pandas, NumPy), and analytics toolchains to isolate trends, anomalies, and actionable insights.
Ethical Hacking: I approach security from the attacker's perspective — mapping attack paths through web applications, internal networks, Active Directory forests, wireless environments, and cloud infrastructure. I conduct penetration tests, hunt bugs on HackerOne and Bugcrowd, and simulate adversarial campaigns as a Red Teamer, always operating under a signed scope agreement and following responsible disclosure throughout.
Building scalable, secure full-stack web applications and backend systems using PHP/Laravel, Python/Django, TypeScript, Next.js, and RESTful APIs. Security is a design concern from day one — not an afterthought.
Processing, querying, and analyzing system metrics, logs, and complex datasets to deliver actionable intelligence, isolate anomalies, optimize performance, and support decision-making with evidence.
Security is where my technical curiosity runs deepest. I test systems the way real attackers do — probing web apps for injection flaws, pivoting through internal networks, chaining Active Directory misconfigurations into full domain compromises, sniffing wireless traffic, and misconfiguration-hunting in cloud environments. I've competed in bug bounty programs on HackerOne and Bugcrowd, and I approach red team exercises as end-to-end adversary simulations rather than isolated vulnerability scans.
Breaking down a professional penetration test from Scoping & Rules of Engagement through Exploitation, Post-Exploitation, Reporting, and Remediation Verification — across web, network, and AD targets.
Read More →A practical walkthrough of SMB relay attacks, Kerberoasting, BloodHound path analysis, Pass-the-Hash lateral movement, and DCSync — with defensive mitigations for each phase.
Read More →A practical comparison of EC-Council's CEH and Offensive Security's OSCP — covering exam format, salary impact ($90k–$120k+), and which path suits penetration testers vs. security administrators.
Read More →I'm actively seeking roles in fullstack engineering, data analysis, and offensive security (penetration testing, red teaming, bug bounty). Whether you have a position, a project, or just want to connect — I'd love to hear from you.