- Cybersecurity Automation Consultant at Gulf Coast Automation Group: asset inventory, vulnerability assessments and compliance reporting across Google Workspace and custom APIs.
- Trained in a SOC analyst cohort at Raíces Cyber, where I triaged 2,000+ simulated alerts in an instructor-built Elastic SIEM environment and tuned detection rules.
- IEEE-published researcher and patent co-inventor, with a B.E. in Electronics & Communication Engineering.
- Currently studying for CompTIA Security+ and building blue-team projects in the open.
A privacy-first attack-path simulator. Pick everyday habits and it draws the path an attacker could walk from one to the next, then shows the cheapest link to break. Runs entirely in the browser on a deterministic rules engine, with no tracking and no model calls.
- Analyst mode maps every step of every path to MITRE ATT&CK v20, with a note on where each step could be detected, and says so honestly when no technique fits.
- Detection Pack: Sigma rules for the steps that leave a trace in Microsoft Entra ID and Exchange Online logs, tested on every push against attack and near-miss samples. CI validates each rule, checks fields against Sentinel table schemas, and builds KQL and SPL.
JavaScript Sigma pySigma MITRE ATT&CK KQL SPL GitHub Actions
A secure MySQL healthcare database built for a Database Security course. AES-256 encryption at rest, TLS in transit, bcrypt-hashed passwords and role-based access control, with NIST SP 800-53 controls AC-2, AC-7 and AU-8 implemented and HIPAA-aligned access rules.
MySQL Python NIST SP 800-53 HIPAA
A Python GUI app that pulls data from multiple OSINT APIs to flag phishing indicators, delivered with a full project plan, risk management plan and earned value analysis.
Python OSINT APIs
A group audit of university security documentation against NIST SP 800-171A. We found gaps in malicious code protection, session management and configuration practices, and wrote remediation checklists for risk assessment, vulnerability monitoring and CUI handling.
NIST SP 800-171A Audit Risk assessment
| Project | What it covers |
|---|---|
| Source Code Analysis | Static analysis of an open-source project with Bandit, findings mapped to CWE |
| SQL Injection & Data Mining | SQLmap exploitation, data extraction and analysis in RapidMiner/RStudio |
| Active Cyber Defense Threat Model | Threat model for a smart home, from physical break-ins to IoT attacks |
| Linux Bash Scripting | Install automation, system status reporting and file cleanup scripts |
| Securing the IoT Landscape | Research paper: Mirai, the Dyn DDoS and the Ring breach, with mitigations |
| Multilevel Security | Research paper: Bell-LaPadula, Biba, and MLS in practice |
| Algorithmic Bias & Informed Consent | Research paper on ethics and consent in social media platforms |
SIEM & detection
Forensics & network
Scripting & tools
Frameworks
- Winner, Wireshark Workshop, IEEE WIE Global Tech Marathon (2025)
- Competitor, NCAE Cyber Games (2024 and 2025)
- Publication: Wayside Inspection Using Wayside Processing Imaging and Deep Learning, IEEE ICPCSN 2023. A U-Net (ResNet50) model that detects railway wheelset defects at 97.52% mPA.
- Training: ISO/IEC 27001:2022 Lead Implementer course (ICDF Academy), API Security Training Cohort (CyberSafe APISecurity Academy), SOC Core Skills (Antisyphon Training), Cyber Defense Pro (TestOut), DoD Cybersecurity Assurance Series
- In progress: CompTIA Security+ (SY0-701)