Security+ Certified · AWS Certified AI Practitioner · Cybersecurity Engineering · Security Operations

I build, secure, monitor, recover, and document real infrastructure in a continuously evolving home Cyber Operations Center.

I hold CompTIA Security+ and AWS Certified AI Practitioner certifications. My near-term target is an entry-level cybersecurity/SOC-oriented role, and I'm deliberately building broader capability in security engineering, cloud and cloud security engineering, and AI-assisted automation engineering through hands-on, production-style projects.

My portfolio goes beyond installing tools. Each major project documents the architecture, security decisions, implementation, validation evidence, failure modes, recovery procedures, and lessons learned behind the finished system.

My working method is simple:

Plan → Build → Secure → Validate → Monitor → Recover → Document → Improve

A structured 26-phase program documenting the design and operation of an enterprise-inspired Cyber Operations Center.

Completed phases 0–9 (Phase 8.5 remains blocked separately):

• program governance, risk management, and documentation standards;
• clean-slate Ubuntu Server foundation and base hardening;
• Docker platform security and private management access;
• private remote access, Pi-hole, Wazuh, ClamAV, and scoped firewall controls;
• encrypted, monitored, and restore-tested backup infrastructure;
• NET-WATCH network visibility and profile-based DNS enforcement;
• Zeek, Prometheus, Grafana, and Graylog telemetry;
• Windows, laptop, phone, and tablet endpoint engineering; and
• private Nextcloud file access and sync with tested recovery and security controls.

Phase 10 — Identity Services: IN PROGRESS.

The current pre-attack baseline uses Windows Server 2025 on DC01 and a Windows 11 Enterprise domain client in the isolated corp.lab.test lab. AD DS/DNS, protected OU/group design, AGDLP-based workstation administration, separate everyday/admin/Tier-0 identities, Tier-0 workstation logon restrictions, hardened password/lockout policy, a working gMSA/KDS foundation, advanced audit policy, and a deliberately isolated legacy service identity are implemented and validated. I also hardened the default machine-account quota from 10 to 0 with explicit workstation-admin delegation and remediated a multihomed-DC DNS registration issue before capturing clean pre-attack snapshots.

Next work is the isolated Kali attacker and Wazuh/Sysmon telemetry validation, followed by controlled password-spray, Kerberoasting and credential-access exercises, investigation/remediation, incident-response records, and Greenbone/OpenVAS vulnerability-management practice.

Phase 8.5 — Linux Mint Cinnamon Migration remains blocked in parallel pending the Cerberus hardware build; it does not gate independent Phase 10 work.

Project Cerberus delivers this workstation as the Linux Mint Cinnamon engineering platform and primary COC control node.

The next workstation will be built from verified Linux Mint Cinnamon installation media with Secure Boot, full-disk encryption, AppArmor, UFW, selective restoration, Wazuh monitoring, application acceptance testing, and a validated Linux Mint backup before the legacy Windows system is retired.

One of my strongest individual production-style engineering projects: a production-style AI automation platform with deterministic eligibility and safety gates, grounded document generation from verified candidate information, an independent reviewer-critique pass, controlled browser automation, and human authority preserved at every consequential decision point. It is not presented as fully autonomous — a CAPTCHA, security question, or ambiguous requirement always hands control back to a human.

Operational private platform · public portfolio showcase published.

View the public showcase →

These repositories are the curated entry points to my current portfolio.

Atlas v1 completed its September 7, 2026 unattended-operation resilience milestone using the existing laptop battery, BIOS Wake on AC, systemd and Docker restart policies. Optional evidence follow-up does not reopen the completed operational milestone.

• Pursuing entry-level cybersecurity / SOC-oriented roles as my near-term target
• Deliberately building toward security engineering, cloud/cloud security engineering, and AI engineering & automation through hands-on, production-style projects — direction, not a current title
• Building COC Phase 10 Identity Services with a validated Windows Server 2025/Windows 11 pre-attack baseline, privilege separation, delegated administration, advanced auditing, and the controlled attack/detection chapter next
• Operating the completed Phase 9 Nextcloud platform without reopening accepted scope
• Keeping completed Atlas infrastructure operational through simple, reusable recovery controls
• Progressing a booked AWS certification path: Cloud Practitioner (Oct 24), Solutions Architect – Associate (Nov 28), Security – Specialty (Dec 19, 2026)
• Building on the completed AWS starter series and Family IT Help Desk v0.2 authenticated ticket management
• Expanding detection engineering and threat-hunting skills
• Developing incident-response and digital-forensics workflows

• CompTIA Security+ certified
• AWS Certified AI Practitioner (AIF-C01), earned August 29, 2026
• Information Security Analyst Program — Correlation One graduate
• Graduated with Honors and a 96% final average
• Building a public, validation-driven cybersecurity engineering portfolio
• Interested in SOC analysis, infrastructure security, identity security, detection, and incident response

I welcome conversations with SOC analysts, cybersecurity professionals, infrastructure engineers, recruiters, and people who learn by building.

Connect with me on LinkedIn · Read my engineering journal · Explore all repositories

Build deliberately. Validate continuously. Document everything.