Profile
Hands-on cybersecurity professional with practical experience designing, deploying, testing and troubleshooting security controls in realistic lab environments.
During the Expadox cybersecurity internship, I contributed to three 14-day engagements covering secure software delivery, centralized threat detection, endpoint protection and vulnerability management. I focus on validating that controls detect real threats, not just that tools run successfully.
Selected experience
ResponseOne: Automated DevSecOps and Incident Response
Project 3
GitHub Actions, Semgrep, Trivy, Gitleaks, OWASP ZAP, Shuffle SOAR, Slack, NVD API
- Built and validated a CI/CD security pipeline for OWASP Juice Shop.
- Integrated SAST, SCA, secrets detection and DAST into the workflow.
- Implemented severity gates that block builds for High/Critical findings and exposed secrets.
- Tested each scanner with planted vulnerabilities: a synthetic AWS key, SQL injection patterns, a vulnerable dependency and a live ZAP finding.
- Diagnosed and fixed false-positive gates, inconsistent alert filtering, scanner configuration issues, missing scan targets, exit-code failures and pipeline breakages.
Impact: A pipeline whose detection and notification paths were validated end to end rather than relying only on green builds.
MedCore Logistics: Hybrid Threat Detection and Monitoring
Project 2 · Team Lead
Wazuh, Suricata, Tailscale, Action1, Atomic Red Team, AWS CloudTrail, Azure Activity Log
- Coordinated delivery of a monitoring environment for Windows and Linux endpoints plus AWS and Azure workloads.
- Owned deployment of the Wazuh manager, indexer, dashboard and four endpoint agents.
- Deployed Suricata on Linux and Windows, including custom rules and persistent Windows services.
- Integrated Suricata network alerts into Wazuh for centralized visibility.
- Validated brute-force and privilege-escalation detections and mapped them to MITRE ATT&CK.
Result: End-to-end detection for key attack techniques. Follow-up work included tuning HTTP exfiltration detection and remediating critical endpoint vulnerabilities.
CyberNetwork: Endpoint Protection and Vulnerability Management
Project 1 · Technical Lead
Wazuh, Action1, Tailscale, Ubuntu, Windows 10/11
- Led an endpoint security program covering four Windows and Ubuntu systems across two locations.
- Built the encrypted Tailscale mesh and onboarded all endpoints without exposing inbound ports.
- Deployed Wazuh and confirmed live telemetry from all four agents.
- Installed Action1 agents and created a vulnerability baseline by CVE, severity and endpoint.
- Configured centralized patch deployment for all managed endpoints with severity-based SLA targets.
Result: Centralized endpoint visibility, and patching turned from an ad hoc activity into a tracked, time-bound process. A comparison scan is the next step for measuring risk reduction.