Hands-on security engineering — from SIEM deployments and vulnerability research to custom CTF machines and open-source tooling.
Microsoft Sentinel SIEM & SOC Lab
Aug 2024 – Present
Designed and implemented a Security Information and Event Management (SIEM) platform and Security Operations Center (SOC) using Microsoft Azure and Microsoft Sentinel — focusing on real-time threat detection, log analytics, incident management, and incident response workflows.
Vulnerability Research & Bug Bounty
Independent security research across production web applications and APIs. Notable findings include GraphQL vulnerabilities enabling unauthorized admin account creation and remote device control, IDOR flaws exposing GPS and account metadata, 18+ XSS vulnerabilities caused by outdated JavaScript modules, and multiple information disclosure and authentication weaknesses — all responsibly reported with detailed remediation guidance.
The Office: Doomsday Device — CTF Walkthrough
Final capstone project for Woz U: a full walkthrough of a Capture the Flag vulnerable machine themed around The Office. Demonstrates a complete penetration testing methodology using Nmap, netdiscover, FFuF, Burp Suite, Wireshark, MySQL, netcat, Exiftool, Gobuster, Hydra, John the Ripper, and more — from reconnaissance through privilege escalation to root.
CTF Vulnerable Machine
A custom vulnerable machine sandbox for penetration testing practice, with multiple solution paths for each flag. Incorporates audio/visual steganography, Morse code, PGP encryption, and image metadata exfiltration — requiring packet analysis, brute-force entry, FTP infiltration, geolocation, wordlist creation, PHP exploitation, SQL injection, and shell establishment to reach root.
Open-Source Tools
Acronomicon
A Python cybersecurity acronym quiz to help learners studying for infosec certifications (Security+, A+, CySA+) build quick recall. Fully functional, with planned leaderboard, certification-specific quiz sets, and randomization.
creedGEN
A wordlist generator built for the “Doomsday Device” CTF scenario. Outputs targeted wordlists for use with brute-force tools like Hydra, Nmap, and Burp Suite.
cyberPUNKED
A Python network ping/discovery script similar to netdiscover and arp-scan, with added functionality for host enumeration.
Want the technical details? Read the write-ups on my blog or reach out.