Nine documented projects across security engineering, software development, application security, incident readiness and governance. Public source evidence or live deployment links are provided where available.
A two-VM Wazuh security monitoring environment with seven custom detection rules, controlled attack simulations, alert investigations and endpoint-hardening checks.
Repository updated
A Python cloud-configuration scanner with AWS-style IAM and infrastructure heuristics, Terraform-plan JSON analysis, SARIF output and repeatable hardened-fixture comparisons.
Repository updated
An authorized assessment of a local OWASP Juice Shop container using OWASP ZAP, HTTP inspection and manual validation, with detailed findings and remediation guidance.
Repository updated
A Flask authentication prototype implementing bcrypt password hashing, time-based one-time passwords, account lockout and authentication event logging, evaluated through controlled tests.
Repository updated
A simulated vendor due-diligence programme covering three fictional ICT suppliers, security questionnaires, evidence quality, risk scoring and conditional onboarding decisions.
Repository updated
A simulated ISO/IEC 27001:2022 information security management assessment with risk treatment, provisional Annex A applicability and internal-audit rehearsal.
Repository updated
A fictional EU financial-services exercise comparing DORA major ICT incident classification and GDPR personal-data breach reporting through separate decisions, reporting clocks and evidence gates.
Repository updated
A simulated third-party support-account incident with evidence-based triage, containment decision trees, response playbooks and role-specific security-awareness materials.
Repository updated
A responsive cybersecurity portfolio generated from structured project data, with interactive project discovery, accessible evidence previews, Cloudflare Workers hosting, GitHub Actions CI/CD and automated SEO checks.
Live deployment · Independent project
Short explanations of design decisions and findings, grounded in the linked project evidence.
How can a correlated alert be distinguished from standalone scheduled-task activity?
Read noteDoes a pattern match establish that a real cloud resource is exposed?
Read noteCan a second authenticated user read a basket owned by another account?
Read noteDoes a password plus one-time code make a login phishing-resistant?
Read noteI'm interested in early-career roles in security operations, security engineering and information security.
