Cybersecurity analyst based in St. Paul, MN. B.A.S. in Cybersecurity & Defense — Metropolitan State University. Currently working as an IoT Security Support Analyst at Alarm.com while building my security portfolio and pursuing CompTIA CySA+.
- Home SOC lab with Splunk SIEM — live threat detection on real endpoint data
- Active Directory attack & defense lab (coming soon)
- Pursuing CompTIA CySA+
- SIEM & Monitoring: Splunk, Log Analysis, Event Correlation, Threat Detection
- Security Tools: Nmap, Wireshark, Nessus, Metasploit, Burp Suite, Firewall Validation
- Networking: Cisco tools, DNS/DHCP, VPNs (WireGuard, IPSec), Active Directory
- Incident Response: Vulnerability Assessment, Risk Analysis, System Hardening, Compliance Audits
- Operating Systems: Windows (Active Directory, Server), Linux (CLI, hardening), macOS
- Programming: Python, Bash, C
- splunk-soc-lab — Home SOC lab, 700k+ real log events, MITRE-mapped detection rule — writeup
- athena-pentest — Full-scope pentest, SMB enumeration, command injection, root access — writeup
- ms17-010-vulnerability-case-study — EternalBlue/MS17-010 vulnerability management case study — writeup
- pihole-wireguard-lab — Raspberry Pi DNS sinkhole + WireGuard VPN for network privacy
I write about cybersecurity projects, detection engineering, and penetration testing on Medium.