Yll is a penetration tester at Novus, and has previously conducted web, mobile, and internal/external network penetration tests at Sentry. At Finbbug, he contributed to a US Embassy-supported project assessing the cybersecurity posture of NGOs and media organizations in Kosovo, identifying a range of web application vulnerabilities. At Starlabs, he built dark web monitoring tools using HaveIBeenPwned and LeakX APIs for automated credential leak detection.

He also leads and conducts research on low-level security topics, including kernels, rootkits, bootkits, and UEFI/firmware security.

He placed 1st at the Iowa State Cyber Defense Competition and represented Kosovo at the 2024 ENISA European Cybersecurity Challenge in Turin.

He has presented at DEF CON 34 (Demo Labs) on his research “Weaponizing eBPF & XDP,” and at BSides Tirana, and has co-organized national and international CTFs designing real-world attack chain challenges.

He is also a member of DEF CON Group Prishtina (DC38338), where he contributes to co-organizing meetups and community events.