Cosme Boisset

I build web and mobile apps, and lately I take them apart. Three years of production React, TypeScript, and Django. One summer reverse-engineering a medical device at VCU's SAFE Lab, which turned into a paper under review and a poster at DFRWS.

Open to full-time software engineering and security roles in NYC, starting 2027
Headshot of Cosme Boisset

Experience

May 2026 - Aug 2026
NSF REU Fellow, Digital Forensics
SAFE Lab, Virginia Commonwealth University
  • Reverse-engineered a Windows-based clinical medical device in Ghidra, identified a credential storage vulnerability, and recovered administrator-level access
  • Recovered records of remote-technician diagnostic requests through static analysis of a 128GB NTFS disk image, then reused the request mechanism to authenticate as a technician, producing 4 verified sign-in events as proof of concept
  • Discovered an unencrypted patient database and DICOM de-identification failures that persisted through the device's deletion processes; paper under review at DFRWS DFC Europe 2027
Jul 2025 - Jan 2026
Web App Developer
GulfSCEI Research Center, University of New Orleans
  • Rebuilt the Pipewatch-AI frontend in React, TypeScript, and Tailwind CSS, replacing a Redux data layer with TanStack Query and cutting page load time by roughly 50%
  • Architected a containerized multiservice environment (Docker Compose) spanning frontend, REST backend, ML inference services, and an Nginx reverse proxy
  • Refactored Django REST API endpoints to decouple the frontend ahead of a backend migration to Ruby on Rails
Dec 2021 - Jun 2024
Freelance Web Developer
Independent
  • Shipped React web and mobile applications across multiple client engagements, from scoping to production deployment
  • Sole frontend engineer on Cobbl for 18 months, building the full React Native/Expo UI from scratch against a Python backend API

Research

Cosme presenting his research poster at DFRWS USA 2026
DFRWS DFC Europe 2027 · Under review
Unmanaged Persistence: Where Patient Data Lives and Dies on a Regulated Point-of-Care Ultrasound Device
M. S. Yaqub, C. Boisset, W. Jo, I. Ahmed. Full research paper.
DFRWS USA · July 2026 · Presenter
Beyond Volatile Memory: Non-Volatile Forensic Reconstruction of Authentication and PHI Exposure on a Point-of-Care Ultrasound Device
C. Boisset, M. S. Yaqub, W. Jo, I. Ahmed. Poster.

Selected Work