My Projects
Personal Portfolio
This site! Built with Django and Tailwind CSS, deployed via a CI/CD pipeline featuring automated security scans, tests, and Podman container builds.
Home/VPS Lab
The Linux server hosting this site (and others)! Previously used as an SSH Honeypot. Is also used as a callback server for bug bounties.
Searxng-SE
A fork of SearxNG that added TLS support for the backend flask application.
Bug Bounty Scripts
A collection of scripts used to automate reconnaissance. These tools focus on subdomain enumeration and origin discovery.
Defensive Engineering and Operations
Threat Mitigation
Managed the emergency mitigation of a 1+ Tbps DDoS attack—one of the largest in Akamai’s history—utilizing advanced TLS Fingerprinting.
Identified and documented broken access control and DoS vulnerabilities (CVE-2002–20001).
Scaled ITDR (Identity Threat Detection and Response) across 30,000+ devices to secure Active Directory and Entra ID.
Security Automation
Built a configuration validation tool in Python and Azure DevOps to audit WAF/CDN drift against organizational standards.
Developed a DLP false-positive analysis tool using K-Means clustering to optimize rule accuracy and reduce alert fatigue.
Architected a hybrid IaC pipeline using Terraform to automate Akamai CDN onboardings, reducing deployment time from hours to minutes.
Tooling and Platforms
Expert-level utilization of Python, Github Actions and Azure DevOps, Linux, Akamai WAF and CDN, and Trellix DLP.
Implementation of ZTNA, mTLS, and CIS Benchmarks across enterprise Linux and Windows environments.
Active labs on TryHackMe and HackTheBox; holder of GSEC, GCLD, and CCNA.