whoami

Joakim Nordheim Larssen

Security researcher and developer, Oslo

I work on software security, compete in CTFs, and ship products.

study studying MSc Information Security at NTNU, Gjøvik (2026–2028)

projects Riposte (an agentic security CLI) and Futtia (AI football analysis)

available recently earned a BSc in Cybersecurity, open to security roles (Oslo, Gjøvik, or remote)

about

I recently earned a BSc in Cybersecurity at Høyskolen Kristiania, Bergen campus, and I am now pursuing an MSc in Information Security at NTNU, Gjøvik. I work across offensive security and software development: I like understanding exactly how a system fails, and then writing the code that makes the next failure visible.

I compete in CTFs, mostly crypto, pwn, and web, and I volunteer as a developer at Kvarteret studenthus. My current focus is whether AI coding tools actually produce secure code, the subject of my bachelor thesis and the idea behind Riposte, an agentic security CLI for offensive and defensive work that I build with Krister Eriksen.

projects

  • Riposte

    [ in dev ]

    An agentic security CLI in the spirit of Claude Code and Codex. Where those drive coding, Riposte drives offensive and defensive work: real recon, exploitation, and detection engineering. Every action is scope-gated and audited, so the agent can't go off-leash.

    role
    builder / architect
    stack
    Python, LiteLLM, Sigma, MITRE ATT&CK, Docker
  • Futtia

    [ in dev ]

    AI football analysis. A TypeScript and Bun monorepo that turns raw match footage into something you can ask questions of: upload a game or connect your usual analytic source, prompt it in plain language, and get answers anchored to the exact clips that back them. The hard part is the pipeline underneath, turning unstructured video into structured, searchable events and then back into watchable highlights.

    role
    developer
    stack
    React, Hono, Bun, Python, Supabase, Vercel
  • Bachelor thesis

    [ 2026 ]

    Secure AI-Accelerated Development in Agile Workflows: A Framework for Small Teams. How small teams can fold AI-accelerated development into an agile workflow while balancing security, architecture, and reliability without losing innovation or parallel collaboration. The answer is SAIF, a five-part framework, grounded in a security experiment across four AI coding models and a semester building inside the ToSee AS startup. A group thesis with Krister Eriksen and Bendik Hagen.

    grade
    A

ctf.log

Mostly crypto, pwn, and web. Three podium finishes, plus my strongest showing against a full open field at EPT.

strongest showing

4th student team, EPT 202516th overall

further results

Capture the flag results and roles
Event Role Result
Cybvest CTF team 1st
Helt Sikker CTF solo 3rd
Kongsberg Gruppen × Helt Sikker CTF team 3rd
EPT 2024 team 34th overall, 8th student team
Cyberlandslaget Christmas CTF participant

academics

MSc Information Security

NTNU, Gjøvik (2026 to 2028)

A two-year master's in Information Security, started autumn 2026.

BSc Cybersecurity

Høyskolen Kristiania, Bergen (2023 to 2026)

Selected coursework, Høyskolen Kristiania
Course Grade
Bachelor thesisA
Cyber DefenseA
Agile ProjectA
Ethical HackingB
IoT / OT SecurityB
Governance, Risk & ComplianceB

Exchange

Southern Utah University, USA (Spring 2025)

Selected coursework, Southern Utah University
Course Grade
Cyber WarfareA
Data Communications & NetworkingA
Algorithms & Data StructuresA
Technology & EthicsA

Cyber Warfare and Data Communications & Networking were taught by Gary Wallace, a former U.S. Navy commander and head of IT for the U.S. Navy.

Full transcript and verified record available on request.

writing

I also write about security, AI risk, and critical infrastructure. Some research, some coursework, some from my own projects.

read all writing