I investigate incidents, hunt for what alerts miss, and build detection content from the ground up, across Microsoft Defender XDR, Wazuh, and the ELK Stack. Recent Computer Science graduate with hands-on SOC lab work and a completed cybersecurity internship behind me.
A self built detection lab on Zorin OS running Wazuh SIEM, OpenSearch, and TheHive case management behind an Nginx reverse proxy. Simulated a four stage web application compromise end to end, each stage independently detected, escalated, and closed with a written verdict.
A client-side encryption tool built with vanilla JavaScript and the Web Crypto API. Supports Caesar, Vigenère, Base64, RSA-2048, and SHA-256, all processed locally with no server round trip. During a self-review, found and patched a stored XSS vulnerability in the saved-messages view.
A real time network scanner and firewall simulator built with Flask and Nmap. Supports TCP SYN, UDP, and service version scans with live WebSocket updates. When run with admin or root privileges, deny rules aren't just visual, they execute a real netsh or iptables command scoped to that specific IP and port pair, actually dropping matching traffic at the OS level.
A cloud hosted security lab on Vultr built around the ELK Stack, with Sysmon deployed for endpoint telemetry, custom Kibana detection rules, adversary simulation via Mythic C2, and automated ticket creation on alert.
Team lead on a CNN, BiLSTM, and GRU based intrusion detection model for IoT enabled healthcare systems, 99.8% detection accuracy, Grade A evaluation. Co-authored and published in IEEE Xplore, presented at DataSciMI 2026.