CONCEPTUAL ILLUSTRATION / TRAINING ENVIRONMENT
01 / INDUSTRIAL SECURITY
Power generation.
Hands-on defense.
A power generation station recreated with a functioning PLC through completed SANS ICS515 coursework.
SANS ICS515 · PLC · ICS LAB
My contribution
Built and worked through a simulated industrial environment, including event monitoring and incident-response practice.
Learning focus
Recognizing activity in an industrial system. This is training-lab experience, distinct from production ICS response.
DRAFT MATERIALS / Lab screenshots, PLC details, and an exercise walkthrough.
02 / SECURITY OPERATIONS
From alert
to investigation.
Hands-on SOC analysis at Cydeo, June 2024–June 2025. An experience showcase grounded in the investigative work.
IBM QRADAR · SPLUNK · CROWDSTRIKE FALCON
My contribution
Investigated logs and suspicious email, enriched alerts with threat intelligence, and used endpoint tooling during response.
Learning focus
Connecting alert context, threat intelligence, and endpoint evidence to support investigation.
DRAFT MATERIALS / Sanitized case notes and an approved alert walkthrough.
INVESTIGATION / WORKFLOW
01
Signal
Review alerts, log data, and suspicious email.
02
Context
Enrich the investigation with threat intelligence.
03
Response
Use endpoint evidence and response tooling.
CONCEPTUAL ILLUSTRATION / LOCAL LEARNING ENVIRONMENT
03 / MALWARE ANALYSIS
A workshop
for deeper questions.
A local malware analysis environment I created using REMnux and VMware.
REMNUX · VMWARE
My contribution
Assembled a dedicated environment for malware analysis practice and workshop development.
Learning focus
Building familiarity with analysis tools and methods. Specific findings will accompany documented exercises.
DRAFT MATERIALS / Workshop screenshots, an outline, and a sample analysis report.
04 / WEB DEVELOPMENT
Built with purpose.
Considered for security.
Website development and penetration testing at Camp Massive, April 2015–April 2020.
WORDPRESS · HTML · CSS · JAVASCRIPT · PHP
My contribution
Developed websites and applied access management, secure coding practices, vulnerability assessment, and penetration testing.
Learning focus
Connecting how a site works, how people use it, and where it can fail.
DRAFT MATERIALS / Approved project URLs, screenshots, and individual project roles.
Design.
Develop.
Question.
The builder and the security practitioner
belong in the same conversation.
