New York City. Defensive security tools and detection logic for IAM, endpoint, and SOC workflows. All work is read-only, evidence-first, and publicly reproducible.
- CySA+ certified · Splunk Core User
- TryHackMe top 1% · 120+ rooms · SOC, SIEM, EDR, Splunk, Wireshark, phishing analysis, Linux, network defense · Profile
- OWASP and ISC2 community member
| Project | Focus | Artifact |
|---|---|---|
| STIGPilot | DISA STIG change triage, remediation backlog generation, evidence checklists, ticket-ready exports, PowerShell government mode | Chrome demo |
| IdentityRiskGraph | CloudTrail IAM event detection, nested access path resolution, MITRE-mapped findings, Streamlit investigation dashboard | Screenshots |
| Splunk Detection Content | SPL detections mapped to MITRE ATT&CK with tuning notes, false-positive paths, and triage playbooks | Playbooks |
| lapse | Entra ID stale-device review using interactive sign-in evidence to eliminate false positives from background sync | Demo |
| relic | Active Directory hygiene review for stale users, service accounts, disabled-but-still-membered accounts, and non-expiring passwords | Demo |
| ai-lms-security-case-study | Authorized assessment case study: access boundaries, control review, remediation paths, and redaction discipline | Control matrix |
| undertaker | Read-only scheduled task auditor for cron, systemd timers, and Windows Scheduled Tasks | Demo |
| browser-bailiff | Browser extension permission, host access, age, and review-reason auditor for Chrome, Edge, and Firefox | Demo |
| home-network-security | Sanitized OPNsense and Proxmox home network security control plane: firewall policy, DNS security, CrowdSec, logs, canary alerts | Design rationale |
STIGPilot handles compliance change triage. lapse and relic handle identity hygiene across Entra ID and on-premises Active Directory. IdentityRiskGraph and splunk-detection-content handle detection logic and SOC investigation workflows. undertaker and browser-bailiff handle scheduled job and browser extension risk review. home-network-security documents a production-style OPNsense and Proxmox home network security control plane.
Website: srkyn.com Email: contact [at] srkyn.com LinkedIn: linkedin.com/in/srkyn