Cybersecurity professional focused on penetration testing, vulnerability assessment, network security, and threat detection. Explore hands-on labs, documented remediations, and verifiable testing evidence.
I bring experience in cybersecurity, information security, risk and compliance, and healthcare environments. My interests include penetration testing, identity and access management (IAM), network defense, incident response, and securing sensitive systems. I build practical Python and security labs, document vulnerabilities and remediations, and use reproducible tests to support my findings.
My background also includes healthcare operations and Epic training, which inform my interest in protecting clinical workflows and patient information. I focus on clear documentation, privacy-aware design, and evidence-backed security work.
Explore code, architecture, and documented security workflows. Follow each repository for its current implementation and limitations.
A privacy-first digital safety website paired with three offline vulnerability exercises: broken access control (IDOR/BOLA), unsafe HTML rendering, and SQL injection. Each includes a documented finding, remediation, and automated tests. 16/16 tests passed in a verified GitHub Actions run (October 13, 2026). The intentionally insecure examples are fictional and not deployed as services.
Privacy-first public Telegram reference validation and offline analysis of authorized export summaries. Includes monthly activity charts, JSON reporting, a printable investigation summary, and synthetic demo data. This tool does not collect private Telegram messages or identify account owners.
Defensive domain metadata scanner with DNS resolution, HTTPS certificate health checks, and public RDAP registration events. Companion dashboard visualizes locally generated JSON reports, informational findings, and a printable assessment summary. The live dashboard displays synthetic data by default; it does not scan domains itself.
Local HTML form inventory, JSON reports, example fixtures, and unit tests.
View project ↗A reproducible local Python lab comparing direct HTML-text insertion with context-aware output encoding. Includes JSON evidence, eight unit tests, CI checks on Python 3.9 and 3.12, a security policy, and a documented case-study-style project showcase. Educational only; it does not test or bypass live WAFs.
Defensive kill-chain mapping and a documented localhost telemetry exercise.
View project ↗Detection validation guidance and analyst playbook documentation.
View project ↗Network monitoring concepts and architecture documentation.
View project ↗Cloud security monitoring project and lab documentation.
View project ↗Three current certifications supporting my work in security and networking.
Interested in cybersecurity collaboration or exploring my work? Find me on GitHub and LinkedIn.