Projects

This page highlights selected cybersecurity work that demonstrates how I investigate attacks, engineer detections, analyze evidence, and communicate security findings. My full collection of hands on labs and technical writeups is available in my dedicated cybersecurity lab portfolio.

Cybersecurity Lab Portfolio

My dedicated technical portfolio contains hands on work across SOC analysis, digital forensics, incident response, threat hunting, malware analysis, threat intelligence, detection engineering, web security, AI security, and certification labs.

The portfolio includes work from Hack The Box, Blue Team Labs Online, TryHackMe, CyberDefenders, Microsoft Sentinel, Splunk, ANY.RUN, Volatility, Wireshark, Autopsy, and sanitized professional experience.

View Cybersecurity Lab Portfolio

Featured Security Work

Enterprise MITRE ATT&CK Detection Engineering

Ascend Learning

• Designed a MITRE ATT&CK coverage matrix mapping 100% of available organizational telemetry to relevant tactics, techniques, and sub techniques.
• Developed and implemented three unique detection rules per technique across two SIEM platforms and one endpoint security platform, reducing detection blind spots across the organization's defensive posture.
• Validated detection logic through simulated adversary emulation, confirming alert generation across mapped ATT&CK techniques and strengthening coverage across multiple threat severity levels.

Enterprise Intrusion Analysis and Incident Response

Hack The Box Certified Defensive Security Analyst

• Investigated a 7 day hands on incident response engagement simulating a compromised enterprise environment with phishing, command and control, data exfiltration, malware execution, brute force authentication, DDoS, SQL injection, and XSS activity.
• Analyzed attacker behavior, affected systems, and supporting evidence to reconstruct the full attack sequence across the compromised environment.
• Produced a professional incident report detailing evidence based findings, remediation actions, and recommendations prioritized by business risk and operational impact.

What My Work Demonstrates

Investigation

Alert triage, evidence review, suspicious activity analysis, attack reconstruction, and incident documentation.

Detection Engineering

MITRE ATT&CK coverage mapping, telemetry analysis, detection rule development, validation, and defensive gap analysis.

Defensive Thinking

Connecting attacker behavior to containment, remediation, vulnerability reduction, and practical security recommendations.

Technical Communication

Translating complex security activity into clear findings, reports, remediation actions, and business relevant recommendations.

Return to Home