About

I am a security engineer and systems programmer working across application security, vulnerability research, low-level systems, and network protocols.

My work focuses on understanding how systems actually behave under real conditions — by reading implementations, tracing data and authority across boundaries, and testing security assumptions. When source or protocol semantics are unavailable, I use reverse engineering to establish the missing behavior before drawing conclusions.

Focus Areas

• Application security and source-code review
• Vulnerability research and adversarial testing
• Security architecture and failure analysis
• Low-level systems (Linux, kernel interfaces, performance tuning)
• Network protocols and traffic analysis
• Security tooling and automation

Approach

• Inspect implementations before inferring behavior
• Trace authority, trust, and state across architectural boundaries
• Treat technical components, operators, and institutional knowledge as part of the security system when they materially affect behavior
• Reproducible research and verifiable results
• Reverse engineer when source or protocol semantics are unavailable
• Upstream-first contributions where possible
• Minimal, composable tooling

Links

• Email: mailto:alexandr.savca89@gmail.com
• GitHub: https://github.com/sighook
• LinkedIn: https://linkedin.com/in/alexandr-savca89
• HackerOne: https://hackerone.com/sighook