Erna Albechien

SOC Analyst and Penetration Tester with extensive experience in full-spectrum security assessments and incident response. Proven expertise in identifying and exploiting complex vulnerabilities, including advanced SQL injection, authentication bypasses, and logic flaws within enterprise environments.

SOC Analyst and Penetration Tester (Intern) at ARITIFICAL INTELLIGENCE AND CYBERSECURITY DEPARTMENT - MSU (2025-10 – 2026-03)

• Executed manual SQL injection attacks to bypass authentication and gain unauthorized access to sensitive databases containing PII and financial records.
• Bypassed complex server-side validation logic by exploiting PHP type-juggling vulnerabilities
• Developed custom payloads to evade Web Application Firewalls (WAF) and Azure Application Proxies
• Discovered and documented unauthenticated data insertion points and Stored XSS vulnerabilities
• Authored comprehensive penetration testing reports for stakeholders, detailing vulnerability impact, CVSS scoring, and prescriptive remediation strategies for developers and system administrators.
• Designed and developed Ticketing System using Django framework and MariaDB
• Designed and developed an internal LLM system using Ollama and RAG.

Bachelor of Computer Science in Computer Science – Management Science & University (2022-02 – 2026-02)